TI-2026-20931 CVE-2026-25892 · GHSA-q4f2-39gr-45jh
Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint
Priority MEDIUM 42
Adminer is open-source database management software.
Vulnerabilities
7 records
TI-2025-28520 CVE-2025-43960 · GHSA-mqh4-2mm8-g7w9
Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory…
Priority MEDIUM 45
Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), leading to a PHP Object Injection issue.
TI-2021-19077 CVE-2021-43008 · GHSA-rxfq-3vpc-vv72
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3)…
Priority MEDIUM 48
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.
TI-2021-10333 CVE-2021-29625 · GHSA-2v82-5746-vwqc
XSS in doc_link
Priority MEDIUM 45
Adminer is open-source database management software.
TI-2021-04411 CVE-2021-21311 · GHSA-x5r2-hj5c-8jx6
SSRF in adminer
Priority CRITICAL 89KEV
Adminer is an open-source database management in a single PHP file.
TI-2020-18079 CVE-2020-35572 · GHSA-9pgx-gcph-mpqr
Adminer through 4.7.8 allows XSS via the history parameter to the default URI.
Priority LOW 31
Adminer through 4.7.8 allows XSS via the history parameter to the default URI.
TI-2018-05526 CVE-2018-7667 · GHSA-43f8-p5w3-5m25
Adminer through 4.3.1 has SSRF via the server parameter.
Priority MEDIUM 50
Adminer through 4.3.1 has SSRF via the server parameter.