Unrated severityNVD Advisory· Published Feb 24, 2005· Updated Jun 16, 2026
CVE-2005-0543
CVE-2005-0543
Description
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*
- (no CPE)range: =2.6.1
Patches
Vulnerability mechanics
References
6- secunia.com/advisories/14382nvdPatchVendor Advisory
- www.gentoo.org/security/en/glsa/glsa-200503-07.xmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/12644nvdPatchVendor Advisory
- sourceforge.net/tracker/index.phpnvdExploitIssue Tracking
- marc.infonvdThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/19462nvd
News mentions
0No linked articles in our index yet.