CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-60797

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST['query'] parameter without any sanitization or parameterization via $data->conn->Execute($_REQUEST['query']). An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or privilege escalation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 6.1%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2025-60797

Phppgadmin Project » Phppgadmin » Version: 5.0

cpe:2.3:a:phppgadmin_project:phppgadmin:5.0
Phppgadmin Project » Phppgadmin » Version: 5.0.1

cpe:2.3:a:phppgadmin_project:phppgadmin:5.0.1
Phppgadmin Project » Phppgadmin » Version: 5.0.2

cpe:2.3:a:phppgadmin_project:phppgadmin:5.0.2
Phppgadmin Project » Phppgadmin » Version: 5.0.3

cpe:2.3:a:phppgadmin_project:phppgadmin:5.0.3
Phppgadmin Project » Phppgadmin » Version: 5.0.4

cpe:2.3:a:phppgadmin_project:phppgadmin:5.0.4
Phppgadmin Project » Phppgadmin » Version: 5.1.0

cpe:2.3:a:phppgadmin_project:phppgadmin:5.1.0
Phppgadmin Project » Phppgadmin » Version: 5.6.0

cpe:2.3:a:phppgadmin_project:phppgadmin:5.6.0
Phppgadmin Project » Phppgadmin » Version: 7.12.0

cpe:2.3:a:phppgadmin_project:phppgadmin:7.12.0
Phppgadmin Project » Phppgadmin » Version: 7.12.1

cpe:2.3:a:phppgadmin_project:phppgadmin:7.12.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-60797

Products

Pricing

Contact Us