CVE-2019-10784

phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, "database.php" does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit a malicious page with a CSRF exploit and execute arbitrary system commands on the server.

• CWE-352

• https://snyk.io/vuln/SNYK-PHP-PHPPGADMINPHPPGADMIN-543885Exploit, Third Party Advisory
• https://snyk.io/vuln/SNYK-PHP-PHPPGADMINPHPPGADMIN-543885Exploit, Third Party Advisory

Published

Feb 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10779All versions of stroom:stroom-app before 5.5.12 and all vers…6.1
• CVE-2019-1078An information disclosure vulnerability exists when the Wind…5.5
• CVE-2019-10780BibTeX-ruby before 5.1.0 allows shell command injection due …9.8
• CVE-2019-10781In schema-inspector before 1.6.9, a maliciously crafted Java…9.8
• CVE-2019-10782All versions of com.puppycrawl.tools:checkstyle before 8.29 …5.3
• CVE-2019-10783All versions including 0.0.4 of lsof npm module are vulnerab…9.8
• CVE-2019-10785dojox is vulnerable to Cross-site Scripting in all versions …6.1
• CVE-2019-10786network-manager through 1.0.2 allows remote attackers to exe…9.8
• CVE-2019-10787im-resize through 2.3.2 allows remote attackers to execute a…9.8
• CVE-2019-10788im-metadata through 3.0.1 allows remote attackers to execute…9.8
• CVE-2019-10789All versions of curling.js are vulnerable to Command Injecti…9.8
• CVE-2019-1079An information disclosure vulnerability exists when Visual S…