Phpmyadmin · Phpmyadmin · CVE-2020-11441
**Name of the Vulnerable Software and Affected Versions**
phpMyAdmin version 5.0.2
**Description**
The issue allows CRLF injection, as demonstrated by `%0D%0Astring%0D%0A` inputs to login form fields causing CRLF sequences to be reflected on an error page. The vendor states that they do not see anything specifically exploitable.
**Recommendations**
For phpMyAdmin version 5.0.2, as a temporary workaround, consider restricting access to the login form fields to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.