CVE-2020-10802 in phpMyAdminИнформация

Сводка

по MITRE

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a crafted database or table name. The attack can be performed if a user attempts certain search operations on the malicious database or table.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Резервировать

22.03.2020

Модерация

принято

Вход

VDB-151991

EPSS

0.01824

KEV

Нет

Деятельности

Очень низкий

Источники

Might our Artificial Intelligence support you?

Check our Alexa App!