Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39062
HistoryJan 31, 2023 - 3:25 a.m.

SQL Injection

2023-01-3103:25:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
sql injection
phpmyadmin
`dcreateaddfield.php`

EPSS

0.002

Percentile

53.3%

phpmyadmin/phpmyadmin is vulnerable to SQL Injection. The vulnerability exists due to the getTableCreationQuery function in DCreateAddField.php, which allows an attacker to inject and execute malicious SQL queries on the system via the tbl_storage_engine or tbl_collation parameters through tbl_create.php.

EPSS

0.002

Percentile

53.3%