Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-d8u7-egc2-8bec
Vulnerability ID VCID-d8u7-egc2-8bec
Aliases CVE-2005-0543
Summary Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php.
Status Published
Exploitability 2.0
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.02795 https://api.first.org/data/v1/epss?cve=CVE-2005-0543
epss 0.02795 https://api.first.org/data/v1/epss?cve=CVE-2005-0543
epss 0.02795 https://api.first.org/data/v1/epss?cve=CVE-2005-0543
epss 0.02795 https://api.first.org/data/v1/epss?cve=CVE-2005-0543
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2005-0543
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0543
CVE-2005-0543;OSVDB-14096 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/25152.txt
CVE-2005-0543;OSVDB-14097 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/25153.txt
CVE-2005-0543;OSVDB-14098 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/25154.txt
CVE-2005-0543;OSVDB-14099 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/25155.txt
CVE-2005-0543;OSVDB-14099 Exploit https://www.securityfocus.com/bid/12644/info
GLSA-200503-07 https://security.gentoo.org/glsa/200503-07
Data source Exploit-DB
Date added Feb. 24, 2005
Description phpMyAdmin 2.6 - 'theme_right.css.php' Multiple Cross-Site Scripting Vulnerabilities
Ransomware campaign use Known
Source publication date Feb. 24, 2005
Exploit type webapps
Platform php
Source update date May 2, 2013
Source URL https://www.securityfocus.com/bid/12644/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.86372
EPSS Score 0.02795
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T17:07:06.845008+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0