In phpMyAdmin 4 before 4.9.4 and 5 before... CVE-2020-5504
6.5
AV
AC
AU
C
I
A
发布：
2020-01-09
修订：
2024-11-21
In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有4条受影响产品信息
