 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2005-0543 |
| Description: | Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.52161 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2005-0543 BugTraq ID: 12644 http://www.securityfocus.com/bid/12644 Bugtraq: 20050224 [SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4 (Google Search) http://marc.info/?l=bugtraq&m=110929725801154&w=2 http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml http://secunia.com/advisories/14382 XForce ISS Database: phpmyadmin-multiple-php-xss(19462) https://exchange.xforce.ibmcloud.com/vulnerabilities/19462 |