CVE-2005-3301

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-10-24 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) left.php, (2) queryframe.php, or (3) server_databases.php.

Affected products

phpMyAdmin: 2.6.4, 2.6.4_pl1, 2.6.4_pl2, 2.6.4_rc1

References

http://secunia.com/advisories/17337
http://secunia.com/advisories/17559
http://secunia.com/advisories/17607
http://www.debian.org/security/2005/dsa-880
http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml
http://www.novell.com/linux/security/advisories/2005_28_sr.html
http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5
http://www.securityfocus.com/bid/15196
http://www.vupen.com/english/advisories/2005/2179
http://secunia.com/advisories/17337
http://secunia.com/advisories/17559

Get alerted when CVE-2005-3301 or the next vulnerability affects your stack