Lucene search
+L

6332 matches found

Mageia
Mageia
•added 2020/01/11 11:52 p.m.•46 views

Updated phpmyadmin packages fix security vulnerability

Updated phpmyadmin package fix security vulnerability: A SQL injection flaw has been discovered in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS2.6AI score0.38778EPSS
SaveExploits5References3
NVD
NVD
•added 2020/01/09 10:15 p.m.•27 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS8.9AI score0.38778EPSS
SaveExploits5References5
OSV
OSV
•added 2020/01/09 10:15 p.m.•7 views

DEBIAN-CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS7.4AI score0.38778EPSS
SaveExploits5References1
OSV
OSV
•added 2020/01/09 10:15 p.m.•31 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS7.4AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2020/01/09 10:15 p.m.•50 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS7.2AI score0.38778EPSS
SaveExploits5References6
Prion
Prion
•added 2020/01/09 10:15 p.m.•27 views

Sql injection

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

6.5CVSS8.7AI score0.38778EPSS
SaveExploits5References4Affected Software3
OSV
OSV
•added 2020/01/09 10:15 p.m.•22 views

UBUNTU-CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS7.4AI score0.38778EPSS
SaveExploits5References7
Cvelist
Cvelist
•added 2020/01/09 9:56 p.m.•59 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8AI score0.38778EPSS
SaveExploits5References5
CVE
CVE
•added 2020/01/09 9:56 p.m.•464 views

CVE-2020-5504

CVE-2020-5504 affects phpMyAdmin 4 prior to 4.9.4 and 5 prior to 5.0.1, where an SQL injection exists in the user accounts page. A malicious user could inject SQL in place of their username when creating queries on that page; an attacker must have a valid MySQL account to access the server. Conne...

8.8CVSS8.6AI score0.38778EPSS
SaveExploits5References5Affected Software1
Debian CVE
Debian CVE
•added 2020/01/09 9:56 p.m.•110 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS9.4AI score0.38778EPSS
SaveExploits5
AlpineLinux
AlpineLinux
•added 2020/01/09 9:56 p.m.•142 views

CVE-2020-5504

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS8.9AI score0.38778EPSS
SaveExploits5
Veracode
Veracode
•added 2020/01/09 5:35 a.m.•59 views

SQL Injection

phpmyadmin/phpmyadmin is vulnerable to SQL injection. An authenticated user is able to inject and execute arbitrary SQL via the username parameter...

8.8CVSS4.9AI score0.38778EPSS
SaveExploits5References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/09 12:00 a.m.•0 views

CVE-2020-5504: Improper Neutralization of Special Elements used in an SQL Command

In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server...

8.8CVSS8AI score0.38778EPSS
SaveExploits5References2
CNVD
CNVD
•added 2020/01/09 12:00 a.m.•16 views

phpMyAdmin SQL Injection Vulnerability (CNVD-2020-02540)

phpMyAdmin is a free, web-based MySQL database management tool from the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A SQL injection vulnerability exists in phpMyAdmin. The...

8.8CVSS9.8AI score0.38778EPSS
SaveExploits5References1
OpenVAS
OpenVAS
•added 2020/01/09 12:00 a.m.•35 views

Fedora Update for phpMyAdmin FEDORA-2019-644b438f51

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.9AI score0.10137EPSS
SaveExploits5References2
OpenVAS
OpenVAS
•added 2020/01/09 12:00 a.m.•27 views

Fedora Update for phpMyAdmin FEDORA-2019-db68ae1fca

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.0224EPSS
SaveExploits0References2
OSV
OSV
•added 2020/01/08 12:00 a.m.•29 views

DLA-2060-1 phpmyadmin - security update

Bulletin has no description...

8.8CVSS8.6AI score0.38778EPSS
SaveExploits5
Symantec
Symantec
•added 2020/01/05 12:00 a.m.•152 views

phpMyAdmin CVE-2020-5504 SQL Injection Vulnerability

...

2.2AI score0.38778EPSS
SaveExploits5Affected Software1
phpMyAdmin
phpMyAdmin
•added 2020/01/05 12:00 a.m.•143 views

SQL injection in user accounts page

PMASA-2020-1 Announcement-ID: PMASA-2020-1 Date: 2020-01-05 Summary SQL injection in user accounts page Description A SQL injection flaw has been discovered in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An...

8.8CVSS7.2AI score0.38778EPSS
SaveExploits5Affected Software1
FreeBSD
FreeBSD
•added 2020/01/05 12:00 a.m.•60 views

phpMyAdmin -- SQL injection

The phpMyAdmin development team reports: A SQL injection flaw has been discovered in the user accounts page...

8.8CVSS2.4AI score0.38778EPSS
SaveExploits5References1
Rows per page
Query Builder