Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

vrana/adminer

7 known vulnerabilities (4 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 4 high
Registry
Packagist

Advisories 7

  • Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint

    Affected: from 4.6.2, fixed in 5.4.2.

  • Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g…

    Affected: through 4.8.1.

  • Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on…

    Affected: from 1.12.0, fixed in 4.6.3.

  • XSS in doc_link

    Affected: from 4.7.8, fixed in 4.8.1.

  • CVE-2021-21311High 7.2 · KEV

    SSRF in adminer

    Affected: fixed in 4.7.9.

  • Adminer through 4.7.8 allows XSS via the history parameter to the default URI.

    Affected: fixed in 4.7.9.

  • Adminer through 4.3.1 has SSRF via the server parameter.

    Affected: fixed in 4.7.8.