UpHeron
All vulnerabilities

Servers and applications

CVE-2020-10803

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results (in tbl_get_field.php and libraries/classes/Display/Results.php). The attacker must be able to insert crafted data into certain database tables, which when retrieved (for instance, through the…

Severity
Medium 5.4
Published
22 Mar 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.9.5, 5.0.2
Sources
NVD

Affected software

SoftwareAffected versions
phpMyAdminServers and applications · cpe:a:phpmyadmin:phpmyadmin
  • From 4.0.0 before 4.9.5
  • From 5.0.0 before 5.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-10803
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-10803