Exploit for SQL Injection in Phpmyadmin

githubexploit · 2026-08-23

Description

SQL Injection in phpMyAdmin 5.0.0 (CVE-2020-5504) enabling database enumeration and data extraction.

Affected Phpmyadmin versions

Phpmyadmin< 4.9.4, 5.0.1

All known vulnerabilities by product

Alt Linux Linuxmint Ubuntu Phpmyadmin

CVSS 8.8 for CVE-2020-5504

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

53%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

38.8%higher than 98.5% of all CVEs

Updated 2026-09-01

Exploit Details

Modified:2026-08-23 18:18

Last Seen:2026-08-23 18:21

Reporter:CerberusMrXi

Written in:Python

Last commit:2026-08-23

Tags

phpMyAdminSQL InjectionCVE-2020-5504blind injectiondata extraction

Other exploits for CVE-2020-5504

phpMyAdmin-CVE-2020-5504-Exploit

2026-09-01 KitPloitKITPLOIT

CVE-2020-5504-phpMyAdmin

2026-08-28 KitPloitKITPLOIT

phpMyAdmin 5.0.0 - SQL Injection

2025-12-03 CodeSecLabEXPLOITDB

📄 phpMyAdmin 5.0.0 SQL Injection

2025-12-03 CodeSecLabPACKETSTORM

Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform

2020-12-08 Keepb1ueGITEE

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=5DD75570-21AE-5284-9D3D-55E377264B1F
# phpMyAdmin-CVE-2020-5504-Exploit
Professional PHPMyAdmin 5.0.0 SQL Injection (CVE-2020-5504) exploitation framework with automated database enumeration, table extraction, and data dumping capabilities. Features blind injection, proxy support, JSON output, and comprehensive error handling for authorized penetration testing and security research.  Author: Sudeepa Wanigarathna