Vendors / Phppgadmin Project Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now Phppgadmin Project records in CISA KEV No Phppgadmin Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 52
phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple pla…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01324 · Published 2023-09-20 · No fix listed CWE-502
Priority MEDIUM 48
phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application.
CVSS 3.1 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.0364 · Published 2020-02-04 · No fix listed CWE-352
Priority LOW 31
phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00307 · Published 2025-11-20 · No fix listed CWE-89
Priority LOW 31
phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00285 · Published 2025-11-20 · No fix listed CWE-89
Priority LOW 27
phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00224 · Published 2025-11-20 · No fix listed CWE-284
Priority LOW 27
phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0025 · Published 2025-11-20 · No fix listed CWE-79
Priority LOW 25
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02655 · Published 2014-05-14 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 0 5 0 0
THREATIST.IORead the docs