An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature. CREATE(Triage):(User=admin) CVE-2019-18622 (https://nvd.nist.gov/vuln/detail/CVE-2019-18622)
