CVE-2025-63947
Reflected XSS in phpMsAdmin 2.2 database_mode.php via dbname
Publication date: 2025-12-18
Last updated on: 2025-12-18
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| phpmsadmin | phpmsadmin | 2.2 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Reflected Cross-Site Scripting (XSS) issue in phpMsAdmin version 2.2, specifically in the database_mode.php file. An attacker can exploit the dbname parameter to execute arbitrary web scripts or HTML code after a user has authenticated, potentially leading to malicious script execution in the user's browser.
How can this vulnerability impact me? :
The vulnerability can allow an attacker to execute arbitrary scripts in the context of an authenticated user, which may lead to theft of sensitive information, session hijacking, or performing actions on behalf of the user without their consent. This can compromise the security and integrity of the affected system and user data.