https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T20:58:37.818588+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-119427 fkie_cve-2026-119427 2026-10-31T20:58:37.839742+00:00

phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allows authenticated users to inject SQL via unescaped json_encode() output. Attackers can send crafted index or value parameters with operation=save_setting_value to /database/designer to overwrite other users' designer settings or run controluser subqueries.

 https://db.gcve.eu/vuln/ghsa-23wc-rmw7-463f GHSA-23wc-rmw7-463f 2026-10-31T20:58:37.839819+00:00

phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allows authenticated users to inject SQL via unescaped json_encode() output. Attackers can send crafted index or value parameters with operation=save_setting_value to /database/designer to overwrite other users' designer settings or run controluser subqueries.