CVE-2005-0543

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

3.96% chance of exploitation in the next 30 days, 90th percentile

Published

2005-02-24

Updated

2024-08-07

ExploitDB entries (4)

• https://www.exploit-db.com/exploits/25155
• https://www.exploit-db.com/exploits/25154
• https://www.exploit-db.com/exploits/25153
• https://www.exploit-db.com/exploits/25152

References

• CVE Record
• NVD entry

Related

• CVE-2005-0523
• CVE-2005-0548
• CVE-2005-0522
• CVE-2005-0549
• CVE-2005-0521
• CVE-2005-0551