6030 matches found
CVE-2020-10804
phpMyAdmin exposes a SQL injection in the retrieval of the current username. Affected versions are 4.x before 4.9.5 and 5.x before 5.0.2, with the flaw located in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php. An attacker with server access can craft a username to...
CVE-2020-10804
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php. A malicious user with access to the server could create a crafted username, and then...
CVE-2020-10804
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php. A malicious user with access to the server could create a crafted username, and then...
CVE-2020-10804
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php. A malicious user with access to the server could create a crafted username, and then...
DLA-2154-1 phpmyadmin - security update
Bulletin has no description...
phpMyAdmin -- SQL injection
phpMyAdmin Team reports: PMASA-2020-2 SQL injection vulnerability in the user accounts page, particularly when changing a password PMASA-2020-3 SQL injection vulnerability relating to the search feature PMASA-2020-4 SQL injection and XSS having to do with displaying results Removing of the...
SQL injection relating to searching
PMASA-2020-3 Announcement-ID: PMASA-2020-3 Date: 2020-03-20 Updated: 2020-03-22 Summary SQL injection relating to searching Description An SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions within...
SQL injection with processing username
PMASA-2020-2 Announcement-ID: PMASA-2020-2 Date: 2020-03-20 Updated: 2020-03-22 Summary SQL injection with processing username Description An SQL injection vulnerability was found in how phpMyAdmin retrieves the current username. A malicious user with access to the server could create a...
SQL injection relating to data display
PMASA-2020-4 Announcement-ID: PMASA-2020-4 Date: 2020-03-20 Updated: 2020-03-22 Summary SQL injection relating to data display Description An SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results. The attac...
GLSA-202003-39 : phpMyAdmin: SQL injection
The remote host is affected by the vulnerability described in GLSA-202003-39 phpMyAdmin: SQL injection PhpMyAdmin was vulnerable to a SQL injection attack through the designer feature. Impact : An authenticated remote attacker, by specifying a specially crafted database/table name, could trigger ...
phpMyAdmin: SQL injection
Background phpMyAdmin is a web-based management tool for MySQL databases. Description PhpMyAdmin was vulnerable to an SQL injection attack through the designer feature. Impact An authenticated remote attacker, by specifying a specially crafted database/table name, could trigger an SQL injection...
SQL injection with processing username
More info at https://www.phpmyadmin.net/security/PMASA-2020-2/...
SQL Injection
phpmyadmin is vulnerable to SQL injection. The username parameter allows a remote attacker to inject and execute arbitrary SQL statements into the database...
SQL Injection in extension "phpmyadmin" (phpmyadmin)
Multiple vulnerabilities have been found in the phpMyAdmin component...
CVE-2013-4454
WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities...
Security feature bypass
WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities...
CVE-2013-4454
CVE-2013-4454 affects WordPress Portable phpMyAdmin Plugin 1.4.1. Connected sources indicate multiple security bypass vulnerabilities in this plugin, without explicit exploit details in the provided documents. The NVD entry lists MEDIUM to CRITICAL severities across CVSS v2/v3, with network-based...
CVE-2013-4454
WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities...