Skip to content
OpenAdvisories

Package · Debian

phppgadmin

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2025-60799

    phppgadmin contains an incorrect access control vulnerability

    phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters ('subject', 'server', 'database', 'queryi…

    phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  • Medium 6.5
    CVE-2025-60798

    phppgadmin contains a SQL injection vulnerability

    phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST['query'] directly to the browseQuery function without proper sanitization. An authenticated attacker c…

    phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  • Medium 6.5
    CVE-2025-60797

    phppgadmin contains a SQL injection vulnerability

    phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST['query'] parameter without any sanitization or parameterization via $data->conn-…

    phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2025-60796

    phppgadmin vulnerable to Cross-site Scripting

    phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components. User-supplied input from $_REQUEST parameters is reflected in HTML output without proper encoding or sanitization in multiple locations inclu…

    phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist