CVE-2025-60799

<= 7.13.0

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows

6.1MEDIUM

CVE-2025-60798

<= 7.13.0

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-contr

6.5MEDIUM

CVE-2025-60797

<= 7.13.0

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly execu

6.5MEDIUM

CVE-2025-60796

<= 7.13.0

phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components. User-supplie

6.1MEDIUM

CVE-2023-40619

<= 7.14.4

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because u

9.8CRITICAL

CVE-2019-10784

<= 7.12.1

phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the applica

9.6CRITICAL

CVE-2012-1600

<= 5.0.3

Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject a

CVE-2011-3598

<= 5.0.2

Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web scri

CVE-2008-5587

<= 4.2.1

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allo

CVE-2007-5728

all versions

Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitra

CVE-2007-2865

all versions

Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script

CVE-2005-2256

all versions

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e

CVE-2001-0479

all versions

Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a