Adminer CVE-2018-7667

Adminer versions 5.4.1 and earlier suffer from a post-message validation bypass that allows remote attackers to trigger

Adminer is an open-source database management in a single PHP file. Rated high severity (CVSS 7.2), this vulnerability i

Adminer is open-source database management software. Rated medium severity (CVSS 6.1), this vulnerability is remotely ex

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. Rated critical severit

Remote code execution in Adminer before 5.4.3 (the single-file PHP database management tool) allows unauthenticated atta

Remote code execution in Adminer before 5.4.3 allows authenticated attackers connected to a SQLite database to write arb

Remote code execution in Adminer 5.4.2 allows authenticated high-privilege users to execute arbitrary code in the contex

Arbitrary file deletion in Adminer before 5.4.3 exposes any file writable by the PHP process to authenticated attackers

Unrestricted PHP file upload in Adminer's AdminerFileUpload plugin (versions before 5.4.3) allows any authenticated low-

Server-side request forgery in Adminer before 5.5.0 allows unauthenticated remote attackers to probe arbitrary internal

Cryptographic failure in Adminer's CSRF token scheme before version 5.4.3 allows an attacker who observes any single val

Cross-site scripting with CSP bypass in Adminer before 5.4.3 enables arbitrary JavaScript execution in the browser of an