Lucene search
+L

6030 matches found

Tenable Nessus
Tenable Nessus
added 2020/01/13 12:0 a.m.43 views

FreeBSD : phpMyAdmin -- SQL injection (16aed7b7-344a-11ea-9cdb-001b217b3468)

The phpMyAdmin development team reports : A SQL injection flaw has been discovered in the user accounts page C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributor...

8.8CVSS9.6AI score0.38778EPSS
SaveExploits4References3
OSV
OSV
added 2020/01/11 11:52 p.m.12 views

MGASA-2020-0033 Updated phpmyadmin packages fix security vulnerability

Updated phpmyadmin package fix security vulnerability: A SQL injection flaw has been discovered in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS9AI score0.38778EPSS
SaveExploits4References4
Mageia
Mageia
added 2020/01/11 11:52 p.m.42 views

Updated phpmyadmin packages fix security vulnerability

Updated phpmyadmin package fix security vulnerability: A SQL injection flaw has been discovered in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS2.6AI score0.38778EPSS
SaveExploits4References3
NVD
NVD
added 2020/01/09 10:15 p.m.24 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS8.9AI score0.38778EPSS
SaveExploits4References5
OSV
OSV
added 2020/01/09 10:15 p.m.2 views

DEBIAN-CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS7.4AI score0.38778EPSS
SaveExploits4References1
OSV
OSV
added 2020/01/09 10:15 p.m.27 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS7.4AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2020/01/09 10:15 p.m.46 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS7.2AI score0.38778EPSS
SaveExploits4References6
Prion
Prion
added 2020/01/09 10:15 p.m.23 views

Sql injection

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

6.5CVSS8.7AI score0.38778EPSS
SaveExploits4References4Affected Software3
OSV
OSV
added 2020/01/09 10:15 p.m.14 views

UBUNTU-CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS7.4AI score0.38778EPSS
SaveExploits4References7
Cvelist
Cvelist
added 2020/01/09 9:56 p.m.49 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8AI score0.38778EPSS
SaveExploits4References5
CVE
CVE
added 2020/01/09 9:56 p.m.445 views

CVE-2020-5504

CVE-2020-5504 affects phpMyAdmin 4 prior to 4.9.4 and 5 prior to 5.0.1, where an SQL injection exists in the user accounts page. A malicious user could inject SQL in place of their username when creating queries on that page; an attacker must have a valid MySQL account to access the server. Conne...

8.8CVSS8.6AI score0.38778EPSS
SaveExploits4References5Affected Software1
Debian CVE
Debian CVE
added 2020/01/09 9:56 p.m.102 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS9.4AI score0.38778EPSS
SaveExploits4
AlpineLinux
AlpineLinux
added 2020/01/09 9:56 p.m.110 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS8.9AI score0.38778EPSS
SaveExploits4
Veracode
Veracode
added 2020/01/09 5:35 a.m.55 views

SQL Injection

phpmyadmin/phpmyadmin is vulnerable to SQL injection. An authenticated user is able to inject and execute arbitrary SQL via the username parameter...

8.8CVSS4.9AI score0.38778EPSS
SaveExploits4References4Affected Software1
CNVD
CNVD
added 2020/01/09 12:0 a.m.7 views

phpMyAdmin SQL Injection Vulnerability (CNVD-2020-02540)

phpMyAdmin is a free, web-based MySQL database management tool from the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A SQL injection vulnerability exists in phpMyAdmin. The...

8.8CVSS9.8AI score0.38778EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.21 views

Fedora Update for phpMyAdmin FEDORA-2019-db68ae1fca

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.0224EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.28 views

Fedora Update for phpMyAdmin FEDORA-2019-644b438f51

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.9AI score0.10182EPSS
SaveExploits5References2
OSV
OSV
added 2020/01/08 12:0 a.m.27 views

DLA-2060-1 phpmyadmin - security update

Bulletin has no description...

8.8CVSS8.6AI score0.38778EPSS
SaveExploits4
Symantec
Symantec
added 2020/01/05 12:0 a.m.145 views

phpMyAdmin CVE-2020-5504 SQL Injection Vulnerability

...

2.2AI score0.38778EPSS
SaveExploits4Affected Software1
phpMyAdmin
phpMyAdmin
added 2020/01/05 12:0 a.m.133 views

SQL injection in user accounts page

PMASA-2020-1 Announcement-ID: PMASA-2020-1 Date: 2020-01-05 Summary SQL injection in user accounts page Description A SQL injection flaw has been discovered in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An...

8.8CVSS7.2AI score0.38778EPSS
SaveExploits4Affected Software1
Rows per page
Query Builder