Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-26935 PoC — phpMyAdmin SQL注入漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/phpMyAdmin%E5%90%8E%E5%8F%B0SQL%E6%B3%A8%E5%85%A5%20CVE-2020-26935.md
Associated Vulnerability
Title:phpMyAdmin SQL注入漏洞 (CVE-2020-26935)
Description:phpMyAdmin是phpMyAdmin团队的一套免费的、基于Web的MySQL数据库管理工具。该工具能够创建和删除数据库，创建、删除、修改数据库表，执行SQL脚本命令等。 phpMyAdmin 4.9.6之前版本，SearchController 5.0.3之前版本存在SQL注入漏洞，该漏洞允许攻击者进行SQL注入攻击。
File Snapshot

 # phpMyAdmin后台SQL注入 CVE-2020-26935

## 漏洞描述

在4.9.6之前的phpMyAdmin和5.0.3之前的5.x的SearchController中发现一个问题

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.