Skip to content
OpenAdvisories

Vendor

vrana

19 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-56705 Public exploit

    Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection

    Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root,…

  • High 7.2
    CVE-2021-21311 Exploited Public exploit Scanner template EPSS 98%

    SSRF in adminer

    Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is …

    KEV Sep 29, 2025