{"action":"Upgrade phpmyadmin/phpmyadmin to 4.9.4 or later.","affected":[{"fixed":"4.9.4","introduced":"4.0.0"},{"fixed":"5.0.1","introduced":"5.0.0"}],"component":"phpmyadmin/phpmyadmin","cve_ids":["CVE-2020-5504"],"ecosystem":"Packagist","epss":0.39036,"exploited":false,"fixed_versions":["4.9.4","5.0.1"],"ghsa_id":"GHSA-fgj8-93xx-f6g6","id":"tcs_01M5KF1SQVAS9F7RTJZB6NPNA2","modified_at":"2025-04-16T16:30:05.925744Z","published_at":"2022-05-24T17:05:59Z","references":["https://osv.dev/vulnerability/GHSA-fgj8-93xx-f6g6","https://nvd.nist.gov/vuln/detail/CVE-2020-5504","https://cybersecurityworks.com/zerodays/cve-2020-5504-phpmyadmin.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmyadmin/phpmyadmin/CVE-2020-5504.yaml","https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-5504.md","https://github.com/phpmyadmin/composer","https://lists.debian.org/debian-lts-announce/2020/01/msg00011.html","https://www.phpmyadmin.net/security/PMASA-2020-1","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00024.html"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-fgj8-93xx-f6g6","url":"https://osv.dev/vulnerability/GHSA-fgj8-93xx-f6g6"}],"summary":"phpMyAdmin SQL injection in user accounts page"}