phpMyAdmin Improper Neutralization of Formula Elements in a CSV File Vulnerability - CVE-2020-22278
phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because quotthe CSV file is accurately generated based on the database contents.