https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:42:58 +0000 https://vulnerability.circl.lu/vuln/bdu:2025-14889 bdu:2025-14889 https://vulnerability.circl.lu/vuln/bdu:2025-14889 https://vulnerability.circl.lu/vuln/fkie_cve-2025-60797 <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST[&#39;query&#39;] parameter without any sanitization or parameterization via $data-&gt;conn-&gt;Execute($_REQUEST[&#39;query&#39;]). An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or privilege escalation.</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST[&#39;query&#39;] parameter without any sanitization or parameterization via $data-&gt;conn-&gt;Execute($_REQUEST[&#39;query&#39;]). An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or privilege escalation.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-60797 https://vulnerability.circl.lu/vuln/ghsa-927w-vq5c-8gc3 <p><strong>Affected:</strong> Packagist: phppgadmin/phppgadmin</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST[&#39;query&#39;] parameter without any sanitization or parameterization via $data-&gt;conn-&gt;Execute($_REQUEST[&#39;query&#39;]). An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or privilege escalation.</p> <p><strong>Affected:</strong> Packagist: phppgadmin/phppgadmin</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST[&#39;query&#39;] parameter without any sanitization or parameterization via $data-&gt;conn-&gt;Execute($_REQUEST[&#39;query&#39;]). An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or privilege escalation.</p> https://vulnerability.circl.lu/vuln/ghsa-927w-vq5c-8gc3 https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-60797 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: phppgadmin, Ubuntu:18.04:LTS: phppgadmin, Ubuntu:20.04:LTS: phppgadmin, Ubuntu:22.04:LTS: phppgadmin, Ubuntu:24.04:LTS: phppgadmin, Ubuntu:25.10: phppgadmin, Ubuntu:26.04:LTS: phppgadmin</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST[&#39;query&#39;] parameter without any sanitization or parameterization via $data-&gt;conn-&gt;Execute($_REQUEST[&#39;query&#39;]). An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: phppgadmin, Ubuntu:18.04:LTS: phppgadmin, Ubuntu:20.04:LTS: phppgadmin, Ubuntu:22.04:LTS: phppgadmin, Ubuntu:24.04:LTS: phppgadmin, Ubuntu:25.10: phppgadmin, Ubuntu:26.04:LTS: phppgadmin</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST[&#39;query&#39;] parameter without any sanitization or parameterization via $data-&gt;conn-&gt;Execute($_REQUEST[&#39;query&#39;]). An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or privilege escalation.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-60797