Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-09611
HistoryFeb 08, 2023 - 12:00 a.m.

phpMyAdmin SQL Injection Vulnerability (CNVD-2023-09611)

2023-02-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
71
phpmyadmin
sql injection
vulnerability
mysql
database management
web-based
createaddfield.php

EPSS

0.002

Percentile

53.3%

phpMyAdmin is a free, web-based MySQL database management tool from the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting and modifying database tables, executing SQL script commands, etc. A security vulnerability exists in phpMyAdmin, which stems from the getTableCreationQuery function in CreateAddField.php, which was found to contain an SQL injection vulnerability. No detailed vulnerability details are currently available.

EPSS

0.002

Percentile

53.3%