Medium severity5.4NVD Advisory· Published Dec 18, 2025· Updated Jun 17, 2026
CVE-2025-63948
CVE-2025-63948
Description
A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:craigtaub:phpmsadmin:2.2:*:*:*:*:*:*:*
- phpMsAdmin/phpMsAdmindescription
- Range: = 2.2
Patches
Vulnerability mechanics
References
2- github.com/solonbarroso/vulnerability-research/blob/main/advisories/phpMsAdmin/CVE-2025-63948.mdnvdExploitThird Party Advisory
- github.com/solonbarroso/vulnerability-research/blob/main/advisories/phpMsAdmin/CVE-pending-phpMsAdmin.mdnvdThird Party Advisory
News mentions
0No linked articles in our index yet.