CVE-2005-2869

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php.

• http://secunia.com/advisories/16605Vendor Advisory
• http://secunia.com/advisories/17337
• http://secunia.com/advisories/17559
• http://secunia.com/advisories/17607
• http://sourceforge.net/tracker/index.php?func=detail&aid=1240880&group_id=23067&atid=377408Exploit, Vendor Advisory
• http://sourceforge.net/tracker/index.php?func=detail&aid=1265740&group_id=23067&atid=377408Exploit, Vendor Advisory
• http://www.debian.org/security/2005/dsa-880
• http://www.novell.com/linux/security/advisories/2005_28_sr.html
• http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html
• http://secunia.com/advisories/16605Vendor Advisory
• http://secunia.com/advisories/17337
• http://secunia.com/advisories/17559
• http://secunia.com/advisories/17607
• http://sourceforge.net/tracker/index.php?func=detail&aid=1240880&group_id=23067&atid=377408Exploit, Vendor Advisory
• http://sourceforge.net/tracker/index.php?func=detail&aid=1265740&group_id=23067&atid=377408Exploit, Vendor Advisory
• http://www.debian.org/security/2005/dsa-880
• http://www.novell.com/linux/security/advisories/2005_28_sr.html
• http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html

Published

Sep 8, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2863Cross-site scripting (XSS) vulnerability in openwebmail-main…
• CVE-2005-2864URBAN 1.5.3_1 allows local users to overwrite arbitrary file…
• CVE-2005-2865Multiple PHP remote file inclusion vulnerabilities in aMembe…
• CVE-2005-2866Mercora IMRadio 4.0.0.0 stores usernames and passwords in pl…
• CVE-2005-2867SQL injection vulnerability in BlueWhaleCRM allows remote at…
• CVE-2005-2868ZipTorrent 1.3.7.3 stores sensitive information in plaintext…
• CVE-2005-2870Unknown vulnerability in the net-svc script on Solaris 10 al…
• CVE-2005-2871Buffer overflow in the International Domain Name (IDN) suppo…
• CVE-2005-2872The ipt_recent kernel module (ipt_recent.c) in Linux kernel …
• CVE-2005-2873The ipt_recent kernel module (ipt_recent.c) in Linux kernel …
• CVE-2005-2874The is_path_absolute function in scheduler/client.c for the …
• CVE-2005-2875Py2Play allows remote attackers to execute arbitrary Python …