https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-01T10:43:37.988546+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-119562 CVE-2026-119562 — phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute 2026-11-01T10:43:37.989279+00:00

Affected: phpMyAdmin

phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplying unescaped col_extra and col_attribute values to /database/central-columns. Attackers can inject SQL into pma__central_columns INSERT and UPDATE queries run with controluser privileges, reading or modifying other users' configuration-storage data.