TI-2023-24207 CVE-2023-45195 · GHSA-p59q-w6ff-wf6f
Adminer and AdminerEvo SSRF
Priority LOW 37
Adminer and AdminerEvo are vulnerable to SSRF via database connection fields.
3 records
Adminer and AdminerEvo are vulnerable to SSRF via database connection fields.
Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects.
The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory.