CVE catalog
CVE-2019-10784
Security update for phpPgAdmin
- Severity
- Critical · CVSS 9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 3.64% · Oct 27, 2026
phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, "database.php" does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit a malicious page with a CSRF exploit and execute arbitrary system commands on the server.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | phppgadmin | 13 | 7.14.7+dfsg-1 | fixed |
| Debian | phppgadmin | 14 | 7.14.7+dfsg-1 | fixed |
| Suse | phpPgAdmin | package hub 15 sp3 | 7.13.0-bp154.2.3.1 | fixed |
| Suse | phpPgAdmin | package hub 15 sp4 | 7.13.0-bp154.2.3.1 | fixed |
| Opensuse | phpPgAdmin | leap 15.3 | 7.13.0-bp154.2.3.1 | fixed |
| Opensuse | phpPgAdmin | leap 15.4 | 7.13.0-bp154.2.3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | phppgadmin | deb | 13 | 7.14.7+dfsg-1 | Not reported | DEBIAN-CVE-2019-10784 | Not reported |
| Debian | phppgadmin | deb | 14 | 7.14.7+dfsg-1 | Not reported | DEBIAN-CVE-2019-10784 | Not reported |
| Suse | phpPgAdmin | rpm | package hub 15 sp3 | 7.13.0-bp154.2.3.1 | Not reported | OPENSUSE-SU-2022:10065-1 | Not reported |
| Suse | phpPgAdmin | rpm | package hub 15 sp4 | 7.13.0-bp154.2.3.1 | Not reported | OPENSUSE-SU-2022:10065-1 | Not reported |
| Opensuse | phpPgAdmin | rpm | leap 15.3 | 7.13.0-bp154.2.3.1 | Not reported | OPENSUSE-SU-2022:10065-1 | Not reported |
| Opensuse | phpPgAdmin | rpm | leap 15.4 | 7.13.0-bp154.2.3.1 | Not reported | OPENSUSE-SU-2022:10065-1 | Not reported |
OpenFactory catalog packages
[Debian 13 (Trixie)]
- [phppgadmin]Fixed
Details (2)
7.14.7+dfsg-1· all · trixieFixed · Fixed:
7.14.7+dfsg-1pypi · phppgadmin · debian · 13
7.14.7+dfsg-1· all · trixieFixed · Fixed:
7.14.7+dfsg-1pypi · phppgadmin · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_10065-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2019-10784]
- [https://osv.dev/vulnerability/openSUSE-SU-2022:10065-1]
- [https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-10784.json]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]