SQL injection in phpMyAdmin - CVE-2020-5504
Published: January 8, 2020 / Updated: November 16, 2021
Vulnerability identifier: #VU24074
CSH Severity: Low
CVSS v4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-5504
CWE-ID: CWE-89
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote user to execute arbitrary SQL queries in database.
The vulnerability exists due to insufficient sanitization of user-supplied data in the user accounts page. A remote authenticated user can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.
Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.
Affected software
phpMyAdmin
SUSE Package Hub for SUSE Linux Enterprise
Ubuntu
phpmyadmin (Alpine package)
phpmyadmin (Ubuntu package)
SUSE Package Hub for SUSE Linux Enterprise
Ubuntu
phpmyadmin (Alpine package)
phpmyadmin (Ubuntu package)
How to mitigate CVE-2020-5504
Install updates from vendor's website.
phpMyAdmin - addressed in versions 4.9.4, 5.0.1
phpmyadmin (Alpine package) - addressed in versions 4.9.5-r0, 5.0.2-r0
phpmyadmin (Ubuntu package) - addressed in versions 4:4.0.10-1ubuntu0.1+esm4, 4:4.5.4.1-2ubuntu2.1+esm6, 4:4.6.6-5ubuntu0.5, 4:4.6.6-5ubuntu0.5+esm1, 4:4.9.5+dfsg1-2ubuntu0.1~esm1
phpmyadmin (Alpine package) - addressed in versions 4.9.5-r0, 5.0.2-r0
phpmyadmin (Ubuntu package) - addressed in versions 4:4.0.10-1ubuntu0.1+esm4, 4:4.5.4.1-2ubuntu2.1+esm6, 4:4.6.6-5ubuntu0.5, 4:4.6.6-5ubuntu0.5+esm1, 4:4.9.5+dfsg1-2ubuntu0.1~esm1