Skip to content
OpenAdvisories
High DLA-2060-1 1 CVE

phpmyadmin - security update

Published Jan 8, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 phpmyadmin 4:4.2.12-2+deb8u8

Vulnerabilities 1

  • High 8.8
    CVE-2020-5504 Public exploit EPSS 28%

    phpMyAdmin SQL injection in user accounts page

    In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access …

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist