Skip to content
OpenAdvisories

Package · Debian

adminer

25 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-56705 Public exploit

    Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection

    Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root,…

    vrana adminer adminer adminer Debian Ubuntu
  • High 8.6
    CVE-2025-43960 Public exploit

    Adminer PHP Object Injection issue leads to Denial of Service

    Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), leading to a PHP Object Injection issue. Remote, unauthenticated attackers can trigger this by sending …

    adminer adminer vrana/adminer Debian Ubuntu Packagist
  • High 7.5
    CVE-2021-43008 Public exploit EPSS 14%

    Files or Directories Accessible to External Parties in Adminer

    Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

    adminer adminer vrana/adminer Debian Ubuntu Packagist
  • High 7.2
    CVE-2021-21311 Exploited Public exploit EPSS 98%

    SSRF in adminer

    Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is …

    vrana adminer adminer adminer Debian Ubuntu Packagist
    KEV Sep 29, 2025