CVE-2025-63948

A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the databasemode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation...

CVE-2025-63947

A Reflected Cross-Site Scripting XSS vulnerability exists in phpMsAdmin version 2.2 in the databasemode.php file. An attacker can execute arbitrary web script or HTML via the dbname parameter after a user is authenticated...

phpMsAdmin 安全漏洞

phpMsAdmin is a Microsoft SQL Server administration tool by Craig Taub Individual Developer. A security vulnerability exists in phpMsAdmin version 2.2, which stems from an unfiltered dbname parameter in the databasemode.php file, which could lead to a reflective cross-site scripting attack...

phpMsAdmin 安全漏洞

phpMsAdmin is a Microsoft SQL Server administration tool by Craig Taub Individual Developer. A security vulnerability exists in phpMsAdmin version 2.2, which stems from an unfiltered dbname parameter in the databasemode.php file, which could lead to an SQL injection attack...