CVE-2005-0543 — Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php

Published Feb 24, 2005

4.3

MEDIUM

CVSS 2.0

EPSS 3.96%

Description

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php.

Affected products

Remediation

No remediation recorded yet.

Metrics

3.96% 0.03964

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.03964

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	3.96% (0.03964)	90.13th	v5 (v2026.06.15)
Jun 15, 2026	3.96% (0.03964)	89.07th	v5 (v2026.06.15)
Oct 14, 2025	2.79% (0.02795)	85.50th	v4 (v2025.03.14)
Mar 17, 2025	1.58% (0.01579)	80.31th	v4 (v2025.03.14)
Dec 12, 2024	0.52% (0.00518)	77.53th	v3 (v2023.03.01)
Feb 8, 2024	0.52% (0.00518)	76.08th	v3 (v2023.03.01)
Mar 7, 2023	0.52% (0.00518)	73.16th	v3 (v2023.03.01)
Mar 6, 2023	2.94% (0.02945)	83.56th	v2 (v2022.01.01)
Apr 1, 2022	2.94% (0.02945)	81.88th	v2 (v2022.01.01)
Feb 4, 2022	2.94% (0.02945)	64.38th	v2 (v2022.01.01)

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://marc.info/?l=bugtraq&m=110929725801154&w=2
mailing-listx_refsource_BUGTRAQThird Party Advisory
http://secunia.com/advisories/14382
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408
x_refsource_CONFIRMExploitIssue Tracking
http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml
vendor-advisoryx_refsource_GENTOOPatchVendor Advisory
http://www.securityfocus.com/bid/12644
vdb-entryx_refsource_BIDPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19462
vdb-entryx_refsource_XF

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=110929725801154&w=2		mailing-listx_refsource_BUGTRAQThird Party Advisory
http://secunia.com/advisories/14382		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408		x_refsource_CONFIRMExploitIssue Tracking
http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml		vendor-advisoryx_refsource_GENTOOPatchVendor Advisory
http://www.securityfocus.com/bid/12644		vdb-entryx_refsource_BIDPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19462		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 24, 2005

Updated Aug 7, 2024

Reserved Feb 24, 2005

Link CVE-2005-0543

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2005-0543

Red Hat

Severity n/a

Public date n/a

Links CVE-2005-0543