CVE-2005-0567

HIGH 7.5CVE-2005-0567 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-0567 is a HIGH (CVSS 7.5) vulnerability affecting phpmyadmin (phpmyadmin).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 86.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpmyadmin phpmyadmin	`= 2.6.1`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the (1) theme parameter to phpmyadmin.css.php or (2) cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote web server that contains the code.

References

marc.info
secunia.com/advisories/14382 · Patch
sourceforge.net/tracker/index.php · Patch
phpmyadmin.net/home_page/security.php · Vendor Advisory
securityfocus.com/bid/12645 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/19465

More vulnerabilities in phpmyadmin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

phpmyadmin

= 2.6.1

No fix yet

Description

More vulnerabilities in phpmyadmin

See all →