CVE-2005-2869: XSS

Published Sep 8, 2005

Updated

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php.

Affected Software

46 affected components

phpMyAdmin phpMyAdmin=2.0

phpMyAdmin phpMyAdmin=2.0.1

phpMyAdmin phpMyAdmin=2.0.2

phpMyAdmin phpMyAdmin=2.0.3

phpMyAdmin phpMyAdmin=2.0.4

phpMyAdmin phpMyAdmin=2.0.5

phpMyAdmin phpMyAdmin=2.1

phpMyAdmin phpMyAdmin=2.1.1

phpMyAdmin phpMyAdmin=2.1.2

phpMyAdmin phpMyAdmin=2.2

phpMyAdmin phpMyAdmin=2.2.2

phpMyAdmin phpMyAdmin=2.2.3

phpMyAdmin phpMyAdmin=2.2.4

phpMyAdmin phpMyAdmin=2.2.5

phpMyAdmin phpMyAdmin=2.2.6

phpMyAdmin phpMyAdmin=2.2_pre1

phpMyAdmin phpMyAdmin=2.2_pre2

phpMyAdmin phpMyAdmin=2.2_rc1

phpMyAdmin phpMyAdmin=2.2_rc2

phpMyAdmin phpMyAdmin=2.2_rc3

phpMyAdmin phpMyAdmin=2.3.1

phpMyAdmin phpMyAdmin=2.3.2

phpMyAdmin phpMyAdmin=2.4.0

phpMyAdmin phpMyAdmin=2.5.0

phpMyAdmin phpMyAdmin=2.5.1

phpMyAdmin phpMyAdmin=2.5.2

phpMyAdmin phpMyAdmin=2.5.3

phpMyAdmin phpMyAdmin=2.5.4

phpMyAdmin phpMyAdmin=2.5.5

phpMyAdmin phpMyAdmin=2.5.5_pl1

phpMyAdmin phpMyAdmin=2.5.5_rc1

phpMyAdmin phpMyAdmin=2.5.5_rc2

phpMyAdmin phpMyAdmin=2.5.6_rc1

phpMyAdmin phpMyAdmin=2.5.7

phpMyAdmin phpMyAdmin=2.5.7_pl1

phpMyAdmin phpMyAdmin=2.6.0_pl1

phpMyAdmin phpMyAdmin=2.6.0_pl2

phpMyAdmin phpMyAdmin=2.6.0_pl3

phpMyAdmin phpMyAdmin=2.6.1

phpMyAdmin phpMyAdmin=2.6.1_pl1

phpMyAdmin phpMyAdmin=2.6.1_pl3

phpMyAdmin phpMyAdmin=2.6.1_rc1

phpMyAdmin phpMyAdmin=2.6.2

phpMyAdmin phpMyAdmin=2.6.2_pl1

phpMyAdmin phpMyAdmin=2.6.3

phpMyAdmin phpMyAdmin=2.6.3_pl1

Event History

Sep 8, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2869?

CVE-2005-2869 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2005-2869?

To fix CVE-2005-2869, upgrade phpMyAdmin to version 2.6.4 or later, which contains the necessary security patches.

What are the consequences of exploiting CVE-2005-2869?

Exploiting CVE-2005-2869 allows an attacker to inject arbitrary JavaScript or HTML, potentially leading to session hijacking or data theft.

Which versions of phpMyAdmin are affected by CVE-2005-2869?

CVE-2005-2869 affects phpMyAdmin versions prior to 2.6.4, including several older versions such as 2.1.1, 2.2.4, and 2.5.0.

What is the nature of the vulnerabilities in CVE-2005-2869?

CVE-2005-2869 includes multiple cross-site scripting (XSS) vulnerabilities that can be exploited through manipulated input fields.