CVE-2012-1600: Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remot...

Security readout for executives and security teams

CVE-2012-1600 is a cross-site scripting issue in phpPgAdmin before 5.0.4. If an attacker can get malicious script or HTML into a function name or type shown by phpPgAdmin, a user viewing that page could have browser-side code executed in the phpPgAdmin session. Exposure is most likely where phpPgAdmin versions before 5.0.4 remain deployed, especially on administrative web interfaces reachable by untrusted networks or shared database users. Treat as a moderate-priority legacy web administration risk. Patch or retire affected phpPgAdmin instances, prioritizing any exposed administrative portals or shared environments. Mitigation focus: Upgrade phpPgAdmin to 5.0.4 or later.; Apply distribution vendor updates where phpPgAdmin is packaged by the OS.; Restrict phpPgAdmin access to trusted administrative networks and users..

Prepared

Jun 14, 2026, 07:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.