phpPgAdmin versions 7.13.0 and earlier contain an incorrect access control vulnerability in the sql.php file. The vulnerability allows unauthorized users to manipulate session variables by sending specially crafted parameters without proper validation. This can lead to session poisoning, stored cross-site scripting, or unauthorized access to sensitive session data.