Threats tagged 'ghsa-23wc-rmw7-463f'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.3	CVE-2026-119427phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allows authenticated Low2.32026-10-30GCVE DatabaseCVE-2026-119427 phpMyAdmin versions up to 5.2.3 have an SQL injection vulnerability in the Designer saveSetting() function. This flaw allows authenticated users to inject SQL through unescaped json_encode() output by sending crafted parameters to the /database/designer endpoint. Exploitation can lead to overwriting other users' designer settings or executing controluser subqueries. Report on CVE-2026-119427 Vulnerability CWE-89 #ghsa-23wc-rmw7-463f	GCVE Database	2026-10-30

Page 1 of 1