VDB

CVE-2020-26935

CVE-2020-26935 PUBLISHED

An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query.

EPSS 89.64% · 99.6th percentile

Risk Scores

EPSS Score
89.64%
99.6th percentile

Affected Products

VendorProductVersions
Bitnamiphpmyadmin4.9.0, 5.0.0
Bitnamiphpmyadmin4.9.0, 5.0.0

Exploit Intelligence

…and 19 more exploits

Timeline

  • Oct 10, 2020 CVE Published
  • Mar 30, 2021 CVE Updated
  • Apr 14, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score
  • Mar 7, 2023 EPSS Score
  • May 13, 2023 EPSS Score
  • Sep 15, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›