CVE-2005-0543: XSS
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in selectserver.lib.php, (2) the bgcolor or rowno parameters in displaytbllinks.lib.php, the leftfontfamily parameter in themeleft.css.php, or the rightfontfamily parameter in themeright.css.php.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0543?
CVE-2005-0543 is considered a moderate severity vulnerability due to its cross-site scripting (XSS) nature.
Which versions of phpMyAdmin are affected by CVE-2005-0543?
CVE-2005-0543 affects phpMyAdmin versions 2.6.1, 2.6.0_pl3, 2.6.0_pl2, and 2.6.1_rc1.
How do I fix CVE-2005-0543?
To fix CVE-2005-0543, upgrade phpMyAdmin to a version that is not vulnerable, preferably later than 2.6.1.
What type of attacks can CVE-2005-0543 facilitate?
CVE-2005-0543 can facilitate cross-site scripting (XSS) attacks allowing attackers to inject arbitrary HTML and scripts.
Is CVE-2005-0543 exploitable remotely?
Yes, CVE-2005-0543 can be exploited remotely by attackers sending specially crafted requests to the phpMyAdmin interface.