CVE-2020-11441

phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error…

published March 31, 2020

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02406 · 84.0th percentile
Published
2020-03-31T16:50Z
EPSS history
Timeline
  • 31 MAR 16:50Z
    phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error…
    cvelistv5