Adminer

4 CVEs across 1 Adminer products. Browse Adminer vulnerabilities, severities, and proof-of-concept exploits.

Adminer products with known CVEs

ProductCVEs
Adminer10
Adminer CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25892High7.52026-02-09Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via J…
CVE-2025-43960High8.62025-08-25Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), lea…
CVE-2023-45195Medium5.32024-06-24Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access system…
CVE-2023-45196High7.52024-06-24Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with…
CVE-2023-45197Critical9.82024-06-21The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory. The attack…
CVE-2021-43008High7.52022-04-05Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by…
CVE-2021-29625High7.52021-05-19Adminer is open-source database management software. A cross-site scripting vulnerability in Adminer versions 4.6.1 to 4.8.0 affects users of MySQL, MariaDB, P…
CVE-2021-21311High7.22021-02-11Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulne…
CVE-2020-35572Medium6.12021-02-09Adminer through 4.7.8 allows XSS via the history parameter to the default URI.
CVE-2018-7667Critical9.82018-03-05Adminer through 4.3.1 has SSRF via the server parameter.