Skip to content
OpenAdvisories

Package · Packagist

adminneo-org/adminneo

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2026-96634

    AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE

    ### Summary This vulnerability is a patch bypass that exploits catastrophic backtracking in a regular expression used to filter ATTACH statements in AdminNeo's SQLite functionality. The original vulnerability (CVE-2021-43008) allowed authenticated users to cr…

    adminneo-org/adminneo Packagist
  • Medium 6.8
    CVE-2026-96629

    AdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgery

    ### Summary AdminNeo's CSRF protection uses a BREACH-resistant XOR masking scheme, but the implementation transmits both the XOR mask and the masked value in every token. This allows any observer who sees a single CSRF token (via network sniffing, log files, …

    adminneo-org/adminneo Packagist