Vulnerabilities

TI-2025-37825 CVE-2025-60799 · GHSA-r63p-v37q-g74c

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in…

LOW 27

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00224 Published 2025-11-20 No fix listed CWE-284

TI-2025-37824 CVE-2025-60798 · GHSA-g6xh-wrpf-v6j6

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at…

LOW 31

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00307 Published 2025-11-20 No fix listed CWE-89

TI-2025-37823 CVE-2025-60797 · GHSA-927w-vq5c-8gc3

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at…

LOW 31

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00285 Published 2025-11-20 No fix listed CWE-89

TI-2025-37822 CVE-2025-60796 · GHSA-h369-cpjj-qfff

phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS)…

LOW 27

phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0025 Published 2025-11-20 No fix listed CWE-79

TI-2023-21413 CVE-2023-40619 · GHSA-r8pf-p598-jhpm

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which…

MEDIUM 52

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple pla…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01324 Published 2023-09-20 No fix listed CWE-502

TI-2019-08049 CVE-2019-10784 · GHSA-84mp-rmf8-wc24

Cross-site request forgery in phppgadmin

MEDIUM 48

phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0364 Published 2020-02-04 No fix listed CWE-352

TI-2012-01391 CVE-2012-1600 · GHSA-36cx-v49w-m2cw

Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02655 Published 2014-05-14 No fix listed CWE-79