system
Describe <CVE-2004-1148>.
user
What is <CVE-2004-1148>?
assistant
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter..