XSS vulnerability in drag-and-drop upload

PMASA-2023-1 Announcement-ID: PMASA-2023-1 Date: 2023-02-07 Summary XSS vulnerability in drag-and-drop upload Description An XSS vulnerability has been discovered where an authenticated user can trigger an XSS attack by uploading a specially-crafted .sql file through the drag-and-drop interface...

PT-2023-6769 · Unknown +3 · Phpmyadmin +3

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions 4.9.11 and earlier phpMyAdmin versions 5.x before 5.2.1 Description: The issue arises due to inadequate protection of the web page structure in phpMyAdmin, allowing an authenticated user to trigger Cross-site Scripting XSS...

SQL Injection

phpmyadmin/phpmyadmin is vulnerable to SQL Injection. The vulnerability exists due to the getTableCreationQuery function in DCreateAddField.php, which allows an attacker to inject and execute malicious SQL queries on the system via the tblstorageengine or tblcollation parameters through...

Ubuntu: Security Advisory (USN-4843-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpMyAdmin 5.x < 5.0.2 SQLi Vulnerability - Linux

phpMyAdmin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin...

phpMyAdmin 5.x < 5.0.2 SQLi Vulnerability - Windows

phpMyAdmin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin...

phpmyadmin contains SQL Injection vulnerability

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.0.2 via the tblstorageengine or tblcollation parameters to tblcreate.php...

GHSA-PRCG-MC23-HGJH phpmyadmin contains SQL Injection vulnerability

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.0.2 via the tblstorageengine or tblcollation parameters to tblcreate.php...

CVE-2020-22452

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tblstorageengine or tblcollation parameters to tblcreate.php...

DEBIAN-CVE-2020-22452

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tblstorageengine or tblcollation parameters to tblcreate.php...

CVE-2020-22452

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tblstorageengine or tblcollation parameters to tblcreate.php...

CVE-2020-22452

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tblstorageengine or tblcollation parameters to tblcreate.php...

Sql injection

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tblstorageengine or tblcollation parameters to tblcreate.php...

UBUNTU-CVE-2020-22452

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tblstorageengine or tblcollation parameters to tblcreate.php...

CVE-2020-22452

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tblstorageengine or tblcollation parameters to tblcreate.php...

CVE-2020-22452

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tblstorageengine or tblcollation parameters to tblcreate.php...

phpMyAdmin SQL注入漏洞

phpMyAdmin is a free, web-based MySQL database management tool from the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security vulnerability exists in phpMyAdmin, which stems...

CVE-2020-22452

The CVE-2020-22452 entry concerns a SQL Injection in phpMyAdmin 5.x before 5.2.0. The vulnerability exists in function getTableCreationQuery in CreateAddField.php and is exploitable via tbl_storage_engine or tbl_collation parameters passed to tbl_create.php. AFFECTED SOFTWARE: phpMyAdmin 5.x (pre...

PT-2023-11619 · Unknown +1 · Phpmyadmin +1

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions prior to 5.2.0 Description: The issue is related to a SQL Injection vulnerability in the getTableCreationQuery function in CreateAddField.php. This vulnerability can be exploited via the tbl storage engine or tbl collation...

CVE-2020-22452

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tblstorageengine or tblcollation parameters to tblcreate.php...