CVE-2020-22452

Опубликовано: 26 янв. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.

Ссылки

http://phpmyadmin.com
Vendor Advisory
https://github.com/phpmyadmin/phpmyadmin/blob/master/ChangeLog
Third Party Advisory
https://github.com/phpmyadmin/phpmyadmin/issues/15898
Exploit
Patch
Third Party Advisory
https://github.com/phpmyadmin/phpmyadmin/pull/16004
Patch
Third Party Advisory
http://phpmyadmin.com
Vendor Advisory
https://github.com/phpmyadmin/phpmyadmin/blob/master/ChangeLog
Third Party Advisory
https://github.com/phpmyadmin/phpmyadmin/issues/15898
Exploit
Patch
Third Party Advisory
https://github.com/phpmyadmin/phpmyadmin/pull/16004
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*

Версия от 5.0.0 (включая) до 5.2.0 (исключая)

EPSS

Процентиль: 87%

0.03397

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVE-2020-22452

CVSS3: 9.8

ubuntu

больше 2 лет назад

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.

CVE-2020-22452

CVSS3: 9.8

debian

больше 2 лет назад

SQL Injection vulnerability in function getTableCreationQuery in Creat ...

GHSA-prcg-mc23-hgjh

CVSS3: 9.8

github

больше 2 лет назад

phpmyadmin contains SQL Injection vulnerability

EPSS

Процентиль: 87%

0.03397

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89