Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Oldkingcone

#43052of 53,630
6.1Total CVSS
Vulnerabilities · 1
PT-2020-12610
6.1
2020-03-31
Phpmyadmin · Phpmyadmin · CVE-2020-11441
**Name of the Vulnerable Software and Affected Versions** phpMyAdmin version 5.0.2 **Description** The issue allows CRLF injection, as demonstrated by `%0D%0Astring%0D%0A` inputs to login form fields causing CRLF sequences to be reflected on an error page. The vendor states that they do not see anything specifically exploitable. **Recommendations** For phpMyAdmin version 5.0.2, as a temporary workaround, consider restricting access to the login form fields to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.