CVE-2005-0992: XSS
Published Apr 7, 2005
·Updated
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.
Affected Software
42 affected components
phpMyAdmin phpMyAdmin=2.1.1
phpMyAdmin phpMyAdmin=2.2.4
phpMyAdmin phpMyAdmin=2.1.2
phpMyAdmin phpMyAdmin=2.2_pre1
phpMyAdmin phpMyAdmin=2.5.0
phpMyAdmin phpMyAdmin=2.2
phpMyAdmin phpMyAdmin=2.0.4
phpMyAdmin phpMyAdmin=2.6.1
phpMyAdmin phpMyAdmin=2.6.1_pl3
phpMyAdmin phpMyAdmin=2.3.1
phpMyAdmin phpMyAdmin=2.0.2
phpMyAdmin phpMyAdmin=2.5.5_rc1
phpMyAdmin phpMyAdmin=2.6.0_pl3
phpMyAdmin phpMyAdmin=2.5.7_pl1
phpMyAdmin phpMyAdmin=2.4.0
phpMyAdmin phpMyAdmin=2.5.5
phpMyAdmin phpMyAdmin=2.5.7
phpMyAdmin phpMyAdmin=2.5.6_rc1
phpMyAdmin phpMyAdmin=2.0.3
phpMyAdmin phpMyAdmin=2.6.1_pl1
phpMyAdmin phpMyAdmin=2.2.6
phpMyAdmin phpMyAdmin=2.6.0_pl1
phpMyAdmin phpMyAdmin=2.5.2
phpMyAdmin phpMyAdmin=2.1
phpMyAdmin phpMyAdmin=2.0.1
phpMyAdmin phpMyAdmin=2.5.1
phpMyAdmin phpMyAdmin=2.6.0_pl2
phpMyAdmin phpMyAdmin=2.2_rc2
phpMyAdmin phpMyAdmin=2.3.2
phpMyAdmin phpMyAdmin=2.5.4
phpMyAdmin phpMyAdmin=2.2.5
phpMyAdmin phpMyAdmin=2.2_rc3
phpMyAdmin phpMyAdmin=2.5.3
phpMyAdmin phpMyAdmin=2.2.2
phpMyAdmin phpMyAdmin=2.2.3
phpMyAdmin phpMyAdmin=2.5.5_rc2
phpMyAdmin phpMyAdmin=2.2_pre2
phpMyAdmin phpMyAdmin=2.6.1_rc1
phpMyAdmin phpMyAdmin=2.2_rc1
phpMyAdmin phpMyAdmin=2.0
phpMyAdmin phpMyAdmin=2.5.5_pl1
phpMyAdmin phpMyAdmin=2.0.5
Remediation
Patch Available
Patch Available
Event History
Apr 7, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0992?
CVE-2005-0992 is classified as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
2
How do I fix CVE-2005-0992?
To fix CVE-2005-0992, upgrade phpMyAdmin to version 2.6.2-rc1 or later.
3
What type of vulnerability is CVE-2005-0992?
CVE-2005-0992 is a cross-site scripting (XSS) vulnerability.
4
What software is affected by CVE-2005-0992?
CVE-2005-0992 affects various versions of phpMyAdmin prior to 2.6.2-rc1.
5
Can CVE-2005-0992 lead to data theft?
Yes, CVE-2005-0992 can potentially lead to data theft by allowing attackers to inject malicious scripts into web pages.