Hoangn144_Vcs

**Name of the Vulnerable Software and Affected Versions** phpMyAdmin versions 4.x through 4.9.4 phpMyAdmin versions 5.x through 5.0.1 **Description** A SQL injection issue has been found where certain parameters are not properly escaped when generating queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. This allows an attacker to create a crafted database or table name. The attack can occur when a user performs specific search operations on the malicious database or table. **Recommendations** For phpMyAdmin versions 4.x through 4.9.4, update to version 4.9.5 or later. For phpMyAdmin versions 5.x through 5.0.1, update to version 5.0.2 or later.

**Name of the Vulnerable Software and Affected Versions** phpMyAdmin versions 4.x through 4.9.4 phpMyAdmin versions 5.x through 5.0.1 **Description** A SQL injection issue was found in the retrieval of the current username, specifically in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php. This could allow a malicious user with server access to create a crafted username and trick a victim into performing specific actions with that user account, such as editing its privileges. **Recommendations** For phpMyAdmin versions 4.x through 4.9.4, update to version 4.9.5 or later. For phpMyAdmin versions 5.x through 5.0.1, update to version 5.0.2 or later.