phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2020-22452 - Vulnerability Database

phpMyAdmin

phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2020-22452

Critical

Reference: CVE-2020-22452

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-22452

Title: phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Overview:

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.