| Revision Date: | 2022-06-30 | Version: | 1 |
| Title: | CVE-2020-10802 |
| Description: |
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a crafted database or table name. The attack can be performed if a user attempts certain search operations on the malicious database or table.
|
| Family: | unix | Class: | vulnerability |
| Status: | | Reference(s): | CVE-2020-10802
openSUSE-SU-2020:0405-1
openSUSE-SU-2020:0427-1
openSUSE-SU-2020:1806-1
Mitre CVE-2020-10802
SUSE CVE-2020-10802
openSUSE-SU-2020:0405-1
openSUSE-SU-2020:0427-1
openSUSE-SU-2020:1806-1
|
| Platform(s): | openSUSE Leap 15.1
openSUSE Tumbleweed
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
SUSE Package Hub for SUSE Linux Enterprise 12
SUSE Package Hub for SUSE Linux Enterprise 15
SUSE Package Hub for SUSE Linux Enterprise 15 SP1
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.1 is installed AND Package Information
phpMyAdmin-4.9.7-lp151.2.24 is installed
AND phpMyAdmin is signed with openSUSE key
|
| Definition Synopsis |
| SUSE Package Hub for SUSE Linux Enterprise 12 is installed
AND phpMyAdmin-4.9.7-52 is installed
|
| Definition Synopsis |
| openSUSE Tumbleweed is installed
AND Package Information
phpMyAdmin-5.1.1-1.2 is installed
OR phpMyAdmin-apache-5.1.1-1.2 is installed
OR phpMyAdmin-lang-5.1.1-1.2 is installed
|
| Definition Synopsis |
| SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
AND phpMyAdmin-4.9.7-bp151.3.24.1 is installed
|
| Definition Synopsis |
| SUSE Package Hub for SUSE Linux Enterprise 12 is installed
AND phpMyAdmin-4.9.7-52.1 is installed
|
| Definition Synopsis |
| Release Information
SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
AND phpMyAdmin-4.9.7-bp151.3.24.1 is installed
OR Package Information
SUSE Package Hub for SUSE Linux Enterprise 15 is installed
AND phpMyAdmin-4.9.7-bp150.43.1 is installed
|