TI-2021-04411 CVE-2021-21311 · GHSA-x5r2-hj5c-8jx6
SSRF in adminer
Priority CRITICAL 89KEV
Adminer is an open-source database management in a single PHP file.
Adminer
Records27All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9
Exploited now
Adminer records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Adminer · all components
TI-2018-05526 CVE-2018-7667 · GHSA-43f8-p5w3-5m25
Adminer through 4.3.1 has SSRF via the server parameter.
Priority MEDIUM 50
Adminer through 4.3.1 has SSRF via the server parameter.
TI-2021-19077 CVE-2021-43008 · GHSA-rxfq-3vpc-vv72
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3)…
Priority MEDIUM 48
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.
TI-2025-28520 CVE-2025-43960 · GHSA-mqh4-2mm8-g7w9
Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory…
Priority MEDIUM 45
Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), leading to a PHP Object Injection issue.
TI-2021-10333 CVE-2021-29625 · GHSA-2v82-5746-vwqc
XSS in doc_link
Priority MEDIUM 45
Adminer is open-source database management software.
TI-2026-20931 CVE-2026-25892 · GHSA-q4f2-39gr-45jh
Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint
Priority MEDIUM 42
Adminer is open-source database management software.
TI-2020-18079 CVE-2020-35572 · GHSA-9pgx-gcph-mpqr
Adminer through 4.7.8 allows XSS via the history parameter to the default URI.
Priority LOW 31
Adminer through 4.7.8 allows XSS via the history parameter to the default URI.