CVE-2026-119562

A flaw was found in phpMyAdmin. An authenticated user can exploit a Structured Query Language SQL injection vulnerability by submitting unescaped parameters to the central columns interface. Because these inputs are processed into database queries executed with elevated control user privileges, a...

CVE-2026-119562

Versions of phpMyAdmin through 5.2.3 are vulnerable to an SQL injection flaw. The vulnerability exists in the /database/central-columns endpoint, where unescaped col_extra and col_attribute values can be manipulated by authenticated users. This allows attackers to inject SQL into pma__central_col...