Lucene search
+L

16 matches found

osv_bit
osv_bit
•added 2024/03/06 11:03 a.m.•71 views

BIT-PHPMYADMIN-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

8CVSS8AI score0.01824EPSS
SaveExploits0References9
osv_ghsa
osv_ghsa
•added 2022/05/24 5:12 p.m.•53 views

GHSA-F4CR-3XMC-2WPM phpMyAdmin SQL injection vulnerability

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

8CVSS8AI score0.01824EPSS
SaveExploits0References11
Github Security Blog
Github Security Blog
•added 2022/05/24 5:12 p.m.•38 views

phpMyAdmin SQL injection vulnerability

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

8CVSS8AI score0.01824EPSS
SaveExploits0References11Affected Software1
osv_cve
osv_cve
•added 2020/03/22 5:15 a.m.•39 views

CVE-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

8CVSS8AI score
SaveExploits0References8
NVD
NVD
•added 2020/03/22 5:15 a.m.•37 views

CVE-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

8CVSS8AI score0.01824EPSS
SaveExploits0References8
Prion
Prion
•added 2020/03/22 5:15 a.m.•40 views

Sql injection

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

6CVSS8AI score0.01824EPSS
SaveExploits0References8Affected Software5
UbuntuCve
UbuntuCve
•added 2020/03/22 5:15 a.m.•62 views

CVE-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

8CVSS7.1AI score0.01824EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2020/03/22 5:15 a.m.•17 views

UBUNTU-CVE-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

8CVSS5.8AI score0.01824EPSS
SaveExploits0References6
CVE
CVE
•added 2020/03/22 3:48 a.m.•330 views

CVE-2020-10802

CVE-2020-10802 affects phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2. A SQL injection exists due to improper escaping of certain parameters when generating search queries in libraries/classes/Controllers/Table/TableSearchController.php, enabling an attacker to craft database/table names during...

8CVSS7.9AI score0.01824EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
•added 2020/03/22 3:48 a.m.•82 views

CVE-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

8AI score0.01824EPSS
SaveExploits0References8
AlpineLinux
AlpineLinux
•added 2020/03/22 3:48 a.m.•124 views

CVE-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

8CVSS8.2AI score0.01824EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/03/22 12:00 a.m.•4 views

PT-2020-12333

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.x through 4.9.4 phpMyAdmin versions 5.x through 5.0.1 Description A SQL injection issue has been found where certain parameters are not properly escaped when generating queries for search actions in...

9.8CVSS0.39036EPSS
SaveExploits5References93
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/22 12:00 a.m.•6 views

CVE-2020-10802: Improper Neutralization of Special Elements used in an SQL Command

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

8CVSS7.5AI score0.01824EPSS
SaveExploits0References2
NVD
NVD
•added 2014/05/26 4:29 a.m.•29 views

CVE-2014-0906

The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check whether a session cookie is current, which allows remote attackers to conduct user-search actions by leveraging possession of a 1 expired or 2 invalidated cookie...

4.3CVSS6.5AI score0.01373EPSS
SaveExploits0References2
Prion
Prion
•added 2014/05/26 4:29 a.m.•34 views

Code injection

The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check whether a session cookie is current, which allows remote attackers to conduct user-search actions by leveraging possession of a 1 expired or 2 invalidated cookie...

4.3CVSS7AI score0.01373EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2014/05/26 1:00 a.m.•44 views

CVE-2014-0906

The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check whether a session cookie is current, which allows remote attackers to conduct user-search actions by leveraging possession of a 1 expired or 2 invalidated cookie...

6.5AI score0.01373EPSS
SaveExploits0References2
Rows per page
Query Builder