EXPOSURES › CVE-2020-22452

CVE-2020-22452

CRITICAL

DETAIL

SourceNVD · cve Published2023-01-26 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2020-22452 ↗

SHAME 35/100

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

phpmyadmin · vendor phpmyadmin · product

DESCRIPTION

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.