CVE-2025-63948

A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the databasemode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation...

CVE-2025-63947: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability exists in phpMsAdmin version 2.2 in the databasemode.php file. An attacker can execute arbitrary web script or HTML via the dbname parameter after a user is authenticated...

phpMsAdmin 安全漏洞

phpMsAdmin is a Microsoft SQL Server administration tool by Craig Taub Individual Developer. A security vulnerability exists in phpMsAdmin version 2.2, which stems from an unfiltered dbname parameter in the databasemode.php file, which could lead to an SQL injection attack...

phpMsAdmin 安全漏洞

phpMsAdmin is a Microsoft SQL Server administration tool by Craig Taub Individual Developer. A security vulnerability exists in phpMsAdmin version 2.2, which stems from an unfiltered dbname parameter in the databasemode.php file, which could lead to a reflective cross-site scripting attack...

CVE-2025-63947

A Reflected Cross-Site Scripting XSS vulnerability exists in phpMsAdmin version 2.2 in the databasemode.php file. An attacker can execute arbitrary web script or HTML via the dbname parameter after a user is authenticated...

CVE-2025-63948: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the databasemode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation...