Skip to content

CVE record · 1 source

CVE-2026-119562

CVSS 4.2

phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplying unescaped col_extra and…

Vendor: PhpMyAdmin
Product: phpMyAdmin
CVSS v3.1: 4.2 AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-89
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

14

CVE NVD 45h ago

phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplying unescaped col_extra and…

phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplying unescaped col_extra and col_attribute values to /database/central-columns. Attackers can inject SQL into…

CVSS 4.2 CVE-2026-119562 PhpMyAdmin