CVE-2005-0567

Description

Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the (1) theme parameter to phpmyadmin.css.php or (2) cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote web server that contains the code.

How to fix CVE-2005-0567

To remediate CVE-2005-0567, upgrade the affected package to a fixed version below.

• Debian/phpmyadmin—upgrade to 3:2.6.1-pl2-1 or later

Is CVE-2005-0567 being exploited?

Low — EPSS is 1.2%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 3:2.6.1-pl2-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2005-0567