Advisories · Technology
vrana adminer.
Every CVE that names vrana adminer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass
- vrana adminer
- Code injection
- CVSS 6.9 Medium
Adminer before 6.0.2 Privileged-Port SSRF via host_port Regex
- vrana adminer
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver
- vrana adminer
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver
- vrana adminer
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE
- vrana adminer
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking
- vrana adminer
- Weak cryptography or TLS
- CVSS 9.3 CriticalCritical · CVSS 9+
Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection
- vrana adminer
- Path traversal
- CVSS 5.3 Medium
Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String
- vrana adminer
- Cross-site scripting (XSS)
- CVSS 8.6 High
Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO
- vrana adminer
- Code injection
- CVSS 7.1 High
Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload
- vrana adminer
- Unrestricted file upload
- CVSS 7.2 High
Adminer before 5.4.3 Arbitrary File Deletion via SQLite Drop
- vrana adminer
- Path traversal
- CVSS 5.3 Medium
Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write
- vrana adminer
- Path traversal
- CVSS 6.9 Medium
Adminer before 5.5.0 SSRF via PDO DSN Injection
- vrana adminer
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Adminer before 5.5.0 Open Redirect via X-Forwarded-Prefix
- vrana adminer
- CWE-20
- CVSS 2.3 Low
Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass
- vrana adminer
- CWE-20
- CVSS 6.0 Medium
Adminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix Header
- vrana adminer
- Other injection