CVE-2020-11441 | BDVDB-2026-133271 Detail

Description#

phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/phpmyadmin/phpmyadmin/issues/16056

Exploit#

No public exploit known

History#

Version 12020-03-31Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.