https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:42:59 +0000 https://vulnerability.circl.lu/vuln/bdu:2025-14887 bdu:2025-14887 https://vulnerability.circl.lu/vuln/bdu:2025-14887 https://vulnerability.circl.lu/vuln/fkie_cve-2025-60798 <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST[&#39;query&#39;] directly to the browseQuery function without proper sanitization. An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands through malicious query manipulation, potentially leading to complete database compromise.</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST[&#39;query&#39;] directly to the browseQuery function without proper sanitization. An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands through malicious query manipulation, potentially leading to complete database compromise.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-60798 https://vulnerability.circl.lu/vuln/ghsa-g6xh-wrpf-v6j6 <p><strong>Affected:</strong> Packagist: phppgadmin/phppgadmin</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST[&#39;query&#39;] directly to the browseQuery function without proper sanitization. An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands through malicious query manipulation, potentially leading to complete database compromise.</p> <p><strong>Affected:</strong> Packagist: phppgadmin/phppgadmin</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST[&#39;query&#39;] directly to the browseQuery function without proper sanitization. An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands through malicious query manipulation, potentially leading to complete database compromise.</p> https://vulnerability.circl.lu/vuln/ghsa-g6xh-wrpf-v6j6 https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-60798 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: phppgadmin, Ubuntu:18.04:LTS: phppgadmin, Ubuntu:20.04:LTS: phppgadmin, Ubuntu:22.04:LTS: phppgadmin, Ubuntu:24.04:LTS: phppgadmin, Ubuntu:25.10: phppgadmin, Ubuntu:26.04:LTS: phppgadmin</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST[&#39;query&#39;] directly to the browseQuery function without proper sanitization. An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands through malicious query manipulation, potentially leading to complete database compromise.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: phppgadmin, Ubuntu:18.04:LTS: phppgadmin, Ubuntu:20.04:LTS: phppgadmin, Ubuntu:22.04:LTS: phppgadmin, Ubuntu:24.04:LTS: phppgadmin, Ubuntu:25.10: phppgadmin, Ubuntu:26.04:LTS: phppgadmin</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST[&#39;query&#39;] directly to the browseQuery function without proper sanitization. An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands through malicious query manipulation, potentially leading to complete database compromise.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-60798