phppgadmin

14 results · Feed

• Medium 6.1
  CVE-2025-60799

  phppgadmin contains an incorrect access control vulnerability

  phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters ('subject', 'server', 'database', 'queryi…

  phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  Nov 20, 2025
• Medium 6.5
  CVE-2025-60798

  phppgadmin contains a SQL injection vulnerability

  phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST['query'] directly to the browseQuery function without proper sanitization. An authenticated attacker c…

  phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  Nov 20, 2025
• Medium 6.5
  CVE-2025-60797

  phppgadmin contains a SQL injection vulnerability

  phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST['query'] parameter without any sanitization or parameterization via $data->conn-…

  phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  Nov 20, 2025
• Medium 6.1
  CVE-2025-60796

  phppgadmin vulnerable to Cross-site Scripting

  phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components. User-supplied input from $_REQUEST parameters is reflected in HTML output without proper encoding or sanitization in multiple locations inclu…

  phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  Nov 20, 2025
• Unscored —
  CVE-2023-40619

  phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code executio…

  phppgadmin phppgadmin Debian Ubuntu
  Sep 20, 2023
• Unscored —
  CVE-2019-10784

  phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from …

  phppgadmin phppgadmin Debian Ubuntu
  Feb 4, 2020
• Unscored —
  CVE-2012-1600

  Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers …

  phppgadmin Debian
  May 14, 2014
• Unscored —
  CVE-2011-3598

  Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitra…

  phppgadmin Debian
  Oct 8, 2011
• Unscored —
  CVE-2008-5587 Public exploit EPSS 13%

  Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is en…

  phppgadmin Debian
  Dec 16, 2008
• Unscored —
  CVE-2007-5728 Public exploit EPSS 15%

  Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inj…

  phppgadmin Debian
  Oct 30, 2007
• Unscored —
  CVE-2007-2865 Public exploit

  Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary…

  phppgadmin Debian
  May 25, 2007
• Unscored —
  CVE-2006-4976

  The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct…

  phppgadmin libphp-adodb Debian
  Sep 25, 2006
• Unscored —
  CVE-2004-2664

  John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests …

  phppgadmin Debian
  Sep 7, 2006
• Unscored —
  CVE-2005-2256 Public exploit

  Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files …

  phppgadmin Debian
  Jul 13, 2005