Phppgadmin Project - vulnerabilities (CVEs)

7 CVEs in 1 products, 0 in the last 30 days, newest from 2025-11-20.

Products

CVE-2025-60798 - CVSS 6.5 (medium), 2025-11-20: phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from…
CVE-2025-60797 - CVSS 6.5 (medium), 2025-11-20: phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL…
CVE-2025-60796 - CVSS 6.1 (medium), 2025-11-20: phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components. User-supplied input from $_REQUEST…
CVE-2025-60799 - CVSS 6.1 (medium), 2025-11-20: phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation…
CVE-2023-40619 - CVSS 9.8 (critical), 2023-09-20: phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is…
CVE-2019-10784 - CVSS 9.6 (critical), 2020-02-04: phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area,…
CVE-2012-1600 - CVSS 4.3 (medium), 2014-05-14: Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML…