CVE-2025-60799

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters 'subject', 'server', 'database', 'queryid' without proper validation or access...

CVE-2025-60799

The web-based administration tool phpPgAdmin versions 7.13.0 and earlier is vulnerable to an incorrect access control flaw in the sql.php file (specifically lines 68-76). The application fails to properly validate or check access controls for user-controlled parameters, including subject, server,...