Описание
phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents.
Ссылки
- Broken LinkThird Party Advisory
- ExploitThird Party Advisory
- Broken LinkThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
EPSS
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents.
phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE ...
phpMyAdmin through 5.0.2 allows CSV injection via Export Section
Уязвимость функции «Export» веб-приложения для администрирования систем управления базами данных phpMyAdmin, позволяющая нарушителю выполнить произвольный код
ALT-PU-2020-3037: package `phpMyAdmin` update to version 5.0.3-alt1
EPSS
8.8 High
CVSS3
6.8 Medium
CVSS2