https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T03:42:58.409563+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2025-14893 bdu:2025-14893 2026-10-04T03:42:58.490493+00:00 bdu:2025-14893 https://vulnerability.circl.lu/vuln/fkie_cve-2025-60799 fkie_cve-2025-60799 2026-10-04T03:42:58.490588+00:00

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters ('subject', 'server', 'database', 'queryid') without proper validation or access control checks. Attackers can exploit this to store arbitrary SQL queries in $_SESSION['sqlquery'] by manipulating these parameters, potentially leading to session poisoning, stored cross-site scripting, or unauthorized access to sensitive session data.

 https://vulnerability.circl.lu/vuln/ghsa-r63p-v37q-g74c GHSA-r63p-v37q-g74c — phppgadmin contains an incorrect access control vulnerability 2026-10-04T03:42:58.490666+00:00

Affected: Packagist: phppgadmin/phppgadmin

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters ('subject', 'server', 'database', 'queryid') without proper validation or access control checks. Attackers can exploit this to store arbitrary SQL queries in $_SESSION['sqlquery'] by manipulating these parameters, potentially leading to session poisoning, stored cross-site scripting, or unauthorized access to sensitive session data.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-60799 UBUNTU-CVE-2025-60799 2026-10-04T03:42:58.490719+00:00

Affected: Ubuntu:16.04:LTS: phppgadmin, Ubuntu:18.04:LTS: phppgadmin, Ubuntu:20.04:LTS: phppgadmin, Ubuntu:22.04:LTS: phppgadmin, Ubuntu:24.04:LTS: phppgadmin, Ubuntu:25.10: phppgadmin, Ubuntu:26.04:LTS: phppgadmin

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters ('subject', 'server', 'database', 'queryid') without proper validation or access control checks. Attackers can exploit this to store arbitrary SQL queries in $_SESSION['sqlquery'] by manipulating these parameters, potentially leading to session poisoning, stored cross-site scripting, or unauthorized access to sensitive session data.