Skip to content
Threat Feed
Subscribe

Vendor

Adminer

3 briefs RSS
low advisory

Adminer: Arbitrary file read via rogue MySQL server (CVE-2020-35572)

Adminer versions 4.7.8 and earlier are vulnerable to an arbitrary file read via a rogue MySQL server connection that facilitates the LOAD DATA LOCAL INFILE command.

Adminer
1r 2t 1c
high advisory

Remote Code Execution in Adminer via SQLite Restriction Bypass

Adminer versions prior to 6.1.1 are vulnerable to remote code execution (RCE) where authenticated SQLite users can bypass security restrictions using UTF-8 byte-order marks to inject and execute PHP code.

Adminer web-vulnerability rce sqlite
1t 1c
high advisory

Unauthenticated Server-Side Request Forgery in Adminer ClickHouse Driver

Adminer versions 6.0.0 through 6.0.1 are vulnerable to a pre-authentication SSRF in the ClickHouse driver, allowing unauthenticated attackers to probe internal networks and exfiltrate sensitive response data.

Adminer web-application ssrf vulnerability
1r 2t 1c