phpMyAdmin < 4.9.5, 5.x < 5.0.2 Multiple SQL Injection Vulnerabilities - PMASA-2020-2, PMSA-2020-3, PMSA-2020-4 (Windows)

phpMyAdmin is prone to multiple SQL injection vulnerabilities.

The following SQL injection vulnerabilities exist: - An SQL injection vulnerability was found in how phpMyAdmin retrieves the current username - An SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions within phpMyAdmin - An SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results.

phpMyAdmin prior to version 4.9.5 and 5.x prior to 5.0.2.

Checks if a vulnerable version is present on the target host.

Update to version 4.9.5, 5.0.2 or later.