https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T14:17:38.391409+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-119427 CVE-2026-119427 — phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting 2026-10-31T14:17:38.392620+00:00

Affected: phpMyAdmin

phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allows authenticated users to inject SQL via unescaped json_encode() output. Attackers can send crafted index or value parameters with operation=save_setting_value to /database/designer to overwrite other users' designer settings or run controluser subqueries.