{"id":"GHSA-jgjc-332c-8cmc","aliases":["CVE-2019-18622"],"title":"SQL injection in phpMyAdmin","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"CRITICAL","description":"An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature.","severity":"critical","score":9.8,"published":"2020-01-16T21:56:15.000Z","modified":"2024-02-16T08:08:04.401Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"phpmyadmin/phpmyadmin","sources":[{"name":"OSV · GHSA-jgjc-332c-8cmc","url":"https://osv.dev/vulnerability/GHSA-jgjc-332c-8cmc"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.9.2"}],"type":"ECOSYSTEM"}],"versions":["4.0.0","4.0.1","4.0.10","4.0.10.1","4.0.10.2","4.0.10.3","4.0.10.4","4.0.10.5","4.0.10.6","4.0.10.7","4.0.10.8","4.0.10.9","4.0.2","4.0.3","4.0.4","4.0.4.1","4.0.4.2","4.0.5","4.0.6","4.0.7","4.0.8","4.0.9","4.7.0","4.7.1","4.7.2","4.7.3","4.7.4","4.7.5","4.7.6","4.7.7","4.7.8","4.7.9","4.8.0","4.8.0.1","4.8.1","4.8.2","4.8.3","4.8.4","4.8.5","4.9.0","4.9.0.1","4.9.1"],"fixed":["4.9.2"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2019-18622","https://github.com/phpmyadmin/composer/commit/51acbf53564d9b52e78509a5688ec2b68976b5f7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BA4DGF7KTQS6WA2DRNJSW66L43WB7LRV","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5GW4KEMNCBQYZCIXEJYC42OEBBN2NSH","https://security.gentoo.org/glsa/202003-39","https://www.phpmyadmin.net/security/PMASA-2019-5","http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00002.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00024.html"],"sources":[{"name":"OSV","id":"GHSA-jgjc-332c-8cmc","modified":"2024-02-16T08:08:04.401540Z","url":"https://osv.dev/vulnerability/GHSA-jgjc-332c-8cmc"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T23:10:32.951Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}