CVE-2005-0543

2005-02-2405:00:00

CWE-79

[email protected]

web.nvd.nist.gov

phpmyadmin

xss

vulnerability

web script

remote injection

security

nvd

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.5%

JSON

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php.

CPENameOperatorVersion
phpmyadmin:phpmyadminphpmyadmineq2.6.1
phpmyadmin:phpmyadminphpmyadmineq2.6.0_pl3
phpmyadmin:phpmyadminphpmyadmineq2.6.0_pl2
phpmyadmin:phpmyadminphpmyadmineq2.6.1_rc1

CPE	Name	Operator	Version
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.6.1
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.6.0_pl3
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.6.0_pl2
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.6.1_rc1