CVE-2020-22278

Description

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents.

References

https://mega.nz/file/ySQnlQSR#vXzY46mgf0CE2ysYpWpbE4O6T_g37--rtaL8pqdHcQs

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-15043

https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22278.pdf

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS