CVE-2012-1600
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4...
CVE-2012-1600 is a medium vulnerability (CVSS 4.3) in Phppgadmin Project Phppgadmin, published May 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.66%, the 85th percentile. Fixed in phppgadmin 5.0.4-1.
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.
Exploit likelihood
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.
- Record
CVE-2012-1600- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.
- Record
CVE-2012-1600- Updated
- 2026-11-02
EUVDEUVD-2012-1614 No score
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.
- Record
EUVD-2012-1614- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-36cx-v49w-m2cw No score
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4...
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.
- Record
GHSA-36cx-v49w-m2cw- Weakness
- CWE-79
- Updated
- 2026-11-02
OSV No score
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.
- Record
CVE-2012-1600- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1600 No score
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.
- Record
DEBIAN-CVE-2012-1600- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10035-1 No score
phpPgAdmin-5.1-5.1 on GA media
These are all security issues fixed in the phpPgAdmin-5.1-5.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10035-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phppgadminDebian:13 |
before 5.0.4-1 | 5.0.4-1 |
phppgadminDebian:14 |
before 5.0.4-1 | 5.0.4-1 |
phpPgAdminopenSUSE:Tumbleweed |
before 5.1-5.1 | 5.1-5.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/52761
postgresql.org/message-id/4F6B447C.6080204%40dalibo.com
lists.opensuse.org/opensuse-updates/2012-04/msg00033.html
openwall.com/lists/oss-security/2012/03/29/6
github.com/phppgadmin/phppgadmin/commit/74174ad639664b52cc1609ede0af8bc403e98a00
Show 14 moreShow less
secunia.com/advisories/48574
sourceforge.net/p/phppgadmin/mailman/message/28783470
exchange.xforce.ibmcloud.com/vulnerabilities/74440
bugzilla.redhat.com/show_bug.cgi?id=808439
osvdb.org/80870
nvd.nist.gov/vuln/detail/CVE-2012-1600
security-tracker.debian.org/tracker/CVE-2012-1600
suse.com/security/cve/CVE-2008-5587