Product
Adminer versions 4.7.8 and earlier are vulnerable to an arbitrary file read via a rogue MySQL server connection that facilitates the LOAD DATA LOCAL INFILE command.