Filtered by vendor Phpmsadmin Subscriptions
Filtered by product Phpmsadmin Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-63947 1 Phpmsadmin 1 Phpmsadmin 2025-12-19 5.4 Medium
A Reflected Cross-Site Scripting (XSS) vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file. An attacker can execute arbitrary web script or HTML via the dbname parameter after a user is authenticated.
CVE-2025-63948 1 Phpmsadmin 1 Phpmsadmin 2025-12-19 5.4 Medium
A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation.