CVE:CVE-2004-1055
CNNVD:CNNVD-200503-012
phpMyAdmin 2.6.0-pl2及更早版本中存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过(1) PmaAbsoluteUri参数、(2) read_dump.php中的zero_rows参数、(3) confirm表格或(4) 内部phpMyAdmin解析器生成的出错信息注入任意web脚本或HTML。
solution:Upgrade phpmyadmin phpmyadmin to a higher version than 2.5.0,2.5.1,2.5.2,2.5.4,2.5.5,2.5.5_pl1,2.5.5_rc1,2.5.5_rc2,2.5.6_rc1,2.5.7,2.5.7_pl1,2.6.0_pl1,2.6.0_pl2,and avoid the version 2.5.0,2.5.1,2.5.2,2.5.4,2.5.5,2.5.5_pl1,2.5.5_rc1,2.5.5_rc2,2.5.6_rc1,2.5.7,2.5.7_pl1,2.6.0_pl1,2.6.0_pl2; Upgrade gentoo linux to a higher version than 1.4,1.4:rc1,1.4:rc2,1.4:rc3,and avoid the version 1.4,1.4:rc1,1.4:rc2,1.4:rc3