phpMyAdmin up to 4.9.4/5.0.1 Privileges.php sql injection

Summaryinfo

A vulnerability identified as critical has been detected in phpMyAdmin up to 4.9.4/5.0.1. The affected element is an unknown function of the file libraries/classes/Server/Privileges.php. This manipulation causes sql injection. This vulnerability appears as CVE-2020-10804. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability classified as critical was found in phpMyAdmin up to 4.9.4/5.0.1 (Database Administration Software). Affected by this vulnerability is some unknown functionality of the file libraries/classes/Server/Privileges.php. The manipulation with an unknown input leads to a sql injection vulnerability. The CWE definition for the vulnerability is CWE-89. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php). A malicious user with access to the server could create a crafted username, and then trick the victim into performing specific actions with that user account (such as editing its privileges).

The weakness was presented 03/22/2020. This vulnerability is known as CVE-2020-10804 since 03/22/2020. The attack can be launched remotely. A single authentication is required for exploitation. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1505 for this issue.

By approaching the search of inurl:libraries/classes/Server/Privileges.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 4.9.5 or 5.0.2 eliminates this vulnerability.

See VDB-151992 and VDB-151991 for similar entries. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Database Administration Software

Name

• phpMyAdmin

Version

• 4.9.0
• 4.9.1
• 4.9.2
• 4.9.3
• 4.9.4
• 5.0.0
• 5.0.1

License

• open-source

Website

• Product: https://www.phpmyadmin.net/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion