Download phpMyAdmin 2.6.0 patch level 2

The team behind phpMyAdmin has just released the second patch level for version 2.6.0 of the software of the same name. The phpMyAdmin project is a collection of PHP scripts that allow a MySQL database to be managed and brought down as bzip2† gzip– or if zip-file. A serious bug was discovered in phpMyAdmin that allows commands to be executed on the server when the PHP option “safe mode” is turned off. Patch level 2 fixes the problem:

About patch level 2:

• Version 2.6.0-pl2 fixes a security flaw that allows, on a PHP server not running in safe mode, to execute a command with the privileges of the user under which the web server is running.

[break]