https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 08:53:25 +0000 https://cve.radiocsirt.org/vuln/cve-2025-60797 <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST[&#39;query&#39;] parameter without any sanitization or parameterization via $data-&gt;conn-&gt;Execute($_REQUEST[&#39;query&#39;]). An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or privilege escalation.</p> <p>phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST[&#39;query&#39;] parameter without any sanitization or parameterization via $data-&gt;conn-&gt;Execute($_REQUEST[&#39;query&#39;]). An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or privilege escalation.</p> https://cve.radiocsirt.org/vuln/cve-2025-60797