Vulnerability Details CVE-2020-22452
SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.9%
CVSS Severity
CVSS v3 Score 9.8
References
- http://phpmyadmin.com
- https://github.com/phpmyadmin/phpmyadmin/blob/master/ChangeLog
- https://github.com/phpmyadmin/phpmyadmin/issues/15898
- https://github.com/phpmyadmin/phpmyadmin/pull/16004
- http://phpmyadmin.com
- https://github.com/phpmyadmin/phpmyadmin/blob/master/ChangeLog
- https://github.com/phpmyadmin/phpmyadmin/issues/15898
- https://github.com/phpmyadmin/phpmyadmin/pull/16004
Products affected by CVE-2020-22452
-
cpe:2.3:a:phpmyadmin:phpmyadmin:5.0.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:5.0.1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:5.0.2
-
cpe:2.3:a:phpmyadmin:phpmyadmin:5.0.3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:5.0.4
-
cpe:2.3:a:phpmyadmin:phpmyadmin:5.1.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:5.1.1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:5.1.2
-
cpe:2.3:a:phpmyadmin:phpmyadmin:5.1.3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:5.1.4