Skip to content
OpenAdvisories

Vendor

adminneo-org

1 known vulnerabilities.

Products

adminneo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-59978

    AdminNeo: version-cache array injection causes persistent denial of service

    AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated `?script=version` endpoint accepts POST data without origin, CSRF or parameter-type validation. A `version[]` parameter becomes a PHP array that `…

    adminneo-org adminneo adminneo-org/adminneo Packagist