Skip to content
OpenAdvisories

Package · Packagist

vrana/adminer

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 7.5
    CVE-2026-25892 Scanner template

    Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint

    Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via JavaScript postMessage, which the browser then POSTs to ?script=version. This endpoint lacks origin v…

    vrana adminer adminer vrana/adminer Ubuntu Packagist
  • High 8.6
    CVE-2025-43960 Public exploit

    Adminer PHP Object Injection issue leads to Denial of Service

    Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), leading to a PHP Object Injection issue. Remote, unauthenticated attackers can trigger this by sending …

    adminer adminer vrana/adminer Debian Ubuntu Packagist
  • High 7.5
    GHSA-97h7-mf38-g9mf

    Adminer file disclosure vulnerability

    Adminer script versions up to 4.6.2 contains file disclosure vulnerability.

    vrana/adminer Packagist
  • High 7.5
    CVE-2021-43008 Public exploit EPSS 14%

    Files or Directories Accessible to External Parties in Adminer

    Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

    adminer adminer vrana/adminer Debian Ubuntu Packagist
  • High 7.5
    CVE-2021-29625 Scanner template

    XSS in doc_link

    Adminer is open-source database management software. A cross-site scripting vulnerability in Adminer versions 4.6.1 to 4.8.0 affects users of MySQL, MariaDB, PgSQL and SQLite. XSS is in most cases prevented by strict CSP in all modern browsers. The only excep…

    vrana adminer adminer adminer Debian Ubuntu Packagist
  • High 7.2
    CVE-2021-21311 Exploited Public exploit Scanner template EPSS 98%

    SSRF in adminer

    Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is …

    vrana adminer adminer adminer Debian Ubuntu Packagist
    KEV Sep 29, 2025
  • Medium 6.1
    CVE-2020-35572

    vrana/adminer via XSS in the history parameter in SQL command

    Adminer through 4.7.8 allows XSS via the history parameter to the default URI.

    adminer adminer vrana/adminer Debian Ubuntu Packagist
  • Medium —
    CVE-2018-7667

    vrana/adminer vulnerable to SSRF by connecting to privileged ports

    Adminer through 4.3.1 has SSRF via the server parameter.

    adminer adminer vrana/adminer Debian Ubuntu Packagist