SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.
References
Link | Resource |
---|---|
https://github.com/phpmyadmin/phpmyadmin/issues/15898 | Exploit Patch Third Party Advisory |
http://phpmyadmin.com | Vendor Advisory |
https://github.com/phpmyadmin/phpmyadmin/blob/master/ChangeLog | Third Party Advisory |
https://github.com/phpmyadmin/phpmyadmin/pull/16004 | Patch Third Party Advisory |
Configurations
Information
Published : 2023-01-26 13:15
Updated : 2023-02-01 08:48
NVD link : CVE-2020-22452
Mitre link : CVE-2020-22452
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
phpmyadmin
- phpmyadmin