CVE-2025-63947

A Reflected Cross-Site Scripting (XSS) vulnerability exists in phpMsAdmin version 2.2 within the database_mode.php file. The root cause is an unfiltered dbname parameter , which allows an authenticated attacker to execute arbitrary web scripts or HTML. While the specific exploitation details are ...

CVE-2025-63948

A SQL Injection vulnerability exists in phpMsAdmin version 2.2 within the database_mode.php file. The root cause is an unfiltered dbname parameter , which allows an attacker to execute arbitrary SQL commands. This could result in information disclosure or database manipulation . To remediate this...