CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40619

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple places. An example is the functionality to manage tables in 'tables.php' where the 'ma[]' POST parameter is deserialized.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.049

EPSS Ranking 89.1%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2023-40619

Phppgadmin Project » Phppgadmin » Version: 5.0

cpe:2.3:a:phppgadmin_project:phppgadmin:5.0
Phppgadmin Project » Phppgadmin » Version: 5.0.1

cpe:2.3:a:phppgadmin_project:phppgadmin:5.0.1
Phppgadmin Project » Phppgadmin » Version: 5.0.2

cpe:2.3:a:phppgadmin_project:phppgadmin:5.0.2
Phppgadmin Project » Phppgadmin » Version: 5.0.3

cpe:2.3:a:phppgadmin_project:phppgadmin:5.0.3
Phppgadmin Project » Phppgadmin » Version: 5.0.4

cpe:2.3:a:phppgadmin_project:phppgadmin:5.0.4
Phppgadmin Project » Phppgadmin » Version: 5.1.0

cpe:2.3:a:phppgadmin_project:phppgadmin:5.1.0
Phppgadmin Project » Phppgadmin » Version: 5.6.0

cpe:2.3:a:phppgadmin_project:phppgadmin:5.6.0
Phppgadmin Project » Phppgadmin » Version: 7.12.0

cpe:2.3:a:phppgadmin_project:phppgadmin:7.12.0
Phppgadmin Project » Phppgadmin » Version: 7.12.1

cpe:2.3:a:phppgadmin_project:phppgadmin:7.12.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40619

Products

Pricing

Contact Us