What is CVE-2025-60798?

CVE-2025-60798 is a medium-severity vulnerability in Phppgadmin Project, classified under SQL Injection. CVSS score: 6.5/10. Published 2025-11-20.

How severe is CVE-2025-60798?

Medium severity. CVSS v3 base score is 6.5 out of 10.

SQL Injection in Phppgadmin Project

CVE-2025-60798

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST['query'] directly to the browseQuery function without proper sanitization. An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands through malicious query manipulation, potentially leading to complete database compromise.

Vulnerability class: SQL Injection

EPSS: 0.003 (20.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Phppgadmin_project Phppgadmin
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Product)
cve@mitre.org (Not Applicable)
cve@mitre.org (Third Party Advisory)

Frequently asked questions

What is CVE-2025-60798?: CVE-2025-60798 is a medium-severity vulnerability in Phppgadmin Project, classified under SQL Injection. CVSS score: 6.5/10. Published 2025-11-20.
How severe is CVE-2025-60798?: Medium severity. CVSS v3 base score is 6.5 out of 10.