{"id":"BIT-phpmyadmin-2020-11441","details":"phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states \"I don't see anything specifically exploitable.","aliases":["CVE-2020-11441"],"modified":"2026-09-08T08:47:46.573216067Z","published":"2024-03-06T11:02:59.583Z","database_specific":{"severity":"Medium","cpes":["cpe:2.3:a:phpmyadmin:phpmyadmin:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*"]},"references":[{"type":"ADVISORY","url":"https://github.com/phpmyadmin/phpmyadmin/issues/16056"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11441"}],"affected":[{"package":{"name":"phpmyadmin","ecosystem":"Bitnami","purl":"pkg:bitnami/phpmyadmin"},"ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.2"},{"fixed":"5.0.3"}]}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/phpmyadmin/BIT-phpmyadmin-2020-11441.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}],"schema_version":"1.9.0"}