Vendors / AdminerEvo Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now AdminerEvo records in CISA KEV No AdminerEvo vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory.
CVSS 4.0 CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00663 · Published 2024-06-21 · Fixed in 4.8.3 CWE-22
Priority LOW 37
Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00582 · Published 2024-06-24 · Fixed in 4.8.4 CWE-400
Priority LOW 37
Adminer and AdminerEvo are vulnerable to SSRF via database connection fields.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00412 · Published 2024-06-24 · Fixed in 4.8.4 CWE-918
Open these records in search → All records by CVSS severity
1 0 2 0 0
