SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.
                
            References
                    | Link | Resource | 
|---|---|
| https://github.com/phpmyadmin/phpmyadmin/issues/15898 | Exploit Patch Third Party Advisory | 
| http://phpmyadmin.com | Vendor Advisory | 
| https://github.com/phpmyadmin/phpmyadmin/blob/master/ChangeLog | Third Party Advisory | 
| https://github.com/phpmyadmin/phpmyadmin/pull/16004 | Patch Third Party Advisory | 
Configurations
                    Information
                Published : 2023-01-26 13:15
Updated : 2023-02-01 08:48
NVD link : CVE-2020-22452
Mitre link : CVE-2020-22452
JSON object : View
CWE
                
                    
                        
                        CWE-89
                        
            Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
                phpmyadmin
- phpmyadmin
 


