CVE-2020-22452

CVSS V2 None CVSS V3 None
Description
SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.
Overview
  • CVE ID
  • CVE-2020-22452
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-26T21:15:21
  • Last Modified Date
  • 2023-02-01T16:48:28
Weakness Enumerations
CWE URL
CWE-89 http://cwe.mitre.org/data/definitions/89.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:* 1 OR 5.0.0 5.2.0
References
Reference URL Reference Tags
http://phpmyadmin.com
https://github.com/phpmyadmin/phpmyadmin/blob/master/ChangeLog
https://github.com/phpmyadmin/phpmyadmin/issues/15898
https://github.com/phpmyadmin/phpmyadmin/pull/16004
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2020-22452
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22452
History
Created Old Value New Value Data Type Notes
2023-01-26 23:16:08 Added to TrackCVE
2023-01-27 15:14:36 2023-01-27T14:03:45 CVE Modified Date updated
2023-01-27 15:14:36 Received Awaiting Analysis Vulnerability Status updated
2023-01-27 20:15:22 2023-01-27T19:15:08 CVE Modified Date updated
2023-01-27 20:15:25 References updated
2023-01-31 19:13:18 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-02-01 17:14:20 2023-02-01T16:48:28 CVE Modified Date updated
2023-02-01 17:14:20 Undergoing Analysis Analyzed Vulnerability Status updated
2023-02-01 17:14:21 Weakness Enumeration new
2023-02-01 17:14:21 CPE Information updated