CVE-2020-10802 in phpMyAdmininformación

Resumen

por MITRE

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a crafted database or table name. The attack can be performed if a user attempts certain search operations on the malicious database or table.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2020-03-22

Moderación

aceptado

Artículo

VDB-151991

CPE

listo

EPSS

0.01824

KEV

no

Actividades

muy bajo

Fuentes

Want to know what is going to be exploited?

We predict KEV entries!