What’s Vulnerable › Vulnerabilities

CVE-2020-22278

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-11-04 · updated 2026-06-17
• Weakness: CWE-1236

Description

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents.

Affected products

• phpMyAdmin: through 5.0.2

References

• https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22278.pdf
• https://mega.nz/file/ySQnlQSR#vXzY46mgf0CE2ysYpWpbE4O6T_g37--rtaL8pqdHcQs
• https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22278.pdf
• https://mega.nz/file/ySQnlQSR#vXzY46mgf0CE2ysYpWpbE4O6T_g37--rtaL8pqdHcQs

Get alerted when CVE-2020-22278 or the next vulnerability affects your stack