CVE-2020-22452: phpMyAdmin

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.

Affected products

• phpMyAdmin phpMyAdmin: from 5.0.0, before 5.2.0 (fixed in 5.2.0)

Published 2023-01-26. Last modified 2026-07-09.