Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40619
HistorySep 20, 2023 - 6:15 p.m.

Deserialization of untrusted data

2023-09-2018:15:00
PRIOn knowledge base
www.prio-n.com
3
phppgadmin
vulnerability
remote code execution
untrusted data
deserialization
nvd

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.4%

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP ‘unserialize()’ function in multiple places. An example is the functionality to manage tables in ‘tables.php’ where the ‘ma[]’ POST parameter is deserialized.

CPENameOperatorVersion
phppgadminle7.14.4

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.4%