CVE-2025-60799
Medium · 6.1phppgadmin contains an incorrect access control vulnerability
CVSS
6.1
EPSS
0.2%
Published
Nov 20, 2025
CISA due date
—
The record
phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters ('subject', 'server', 'database', 'queryid') without proper validation or access control checks. Attackers can exploit this to store arbitrary SQL queries in $_SESSION['sqlquery'] by manipulating these parameters, potentially leading to session poisoning, stored cross-site scripting, or unauthorized access to sensitive session data.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | phppgadmin/phppgadmin | 0 | No fix |
Related vulnerabilities
- GHSA-r63p-v37q-g74c phppgadmin contains an incorrect access control vulnerability Same vulnerability
- GHSA-86gh-c8r8-xwhq phpPgAdmin contains a remote command execution vulnerability Also affects phppgadmin/phppgadmin
- CVE-2021-47853 phpPgAdmin contains a remote command execution vulnerability Also affects phppgadmin/phppgadmin
- GHSA-g6xh-wrpf-v6j6 phppgadmin contains a SQL injection vulnerability Also affects phppgadmin/phppgadmin
- GHSA-927w-vq5c-8gc3 phppgadmin contains a SQL injection vulnerability Also affects phppgadmin/phppgadmin
- GHSA-h369-cpjj-qfff phppgadmin vulnerable to Cross-site Scripting Also affects phppgadmin/phppgadmin
- CVE-2025-60796 phppgadmin vulnerable to Cross-site Scripting Also affects phppgadmin/phppgadmin
- CVE-2025-60797 phppgadmin contains a SQL injection vulnerability Also affects phppgadmin/phppgadmin