Phppgadmin Project Phppgadmin
7 CVEs affecting Phppgadmin Project Phppgadmin. Latest disclosed: 2025-11-20. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-40619 | Critical | 9.8 | 2023-09-20 | phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is direct… |
CVE-2019-10784 | Critical | 9.6 | 2020-02-04 | phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, "databas… |
CVE-2025-60798 | Medium | 6.5 | 2025-11-20 | phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST['q… |
CVE-2025-60797 | Medium | 6.5 | 2025-11-20 | phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries… |
CVE-2025-60799 | Medium | 6.1 | 2025-11-20 | phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of… |
CVE-2025-60796 | Medium | 6.1 | 2025-11-20 | phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components. User-supplied input from $_REQUEST parame… |
CVE-2012-1600 | | 2014-05-14 | Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML v… |