CVE-2025-63948
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation.
Risk Assessment
An attacker can gain unauthorized access to database data, modify or delete it, potentially leading to data integrity and confidentiality breaches.
Recommendation
Update phpMsAdmin to the latest version or apply a security patch against SQL injection.
Other vulnerabilities in phpMsAdmin
Original NVD description (English source)
A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS