{"id":"CVE-2017-20066","aliases":["EUVD-2017-11073","GHSA-3754-735c-c4rm"],"status":"published","title":"Adminer Login access control","description":"A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00407,"percentile":0.35273,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284","CWE-863"],"published":"2022-06-20T20:10:19Z","modified":"2026-06-17T01:15:06Z","products":[{"vendor":"adminer_login_project","product":"adminer_login"},{"vendor":"unspecified","product":"adminer login"}],"references":[{"url":"http://seclists.org/fulldisclosure/2017/Feb/96","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://sumofpwn.nl/advisory/2016/wordpress_adminer_plugin_allows_public__local__database_login.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://vuldb.com/?id.97384","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-20066"},{"url":"https://github.com/advisories/GHSA-3754-735c-c4rm"}],"sources":{"cve":[{"id":"CVE-2017-20066","title":"Adminer Login access control","description":"A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.","status":"published","published":"2022-06-20T20:10:19Z","modified":"2025-04-15T14:18:46.832Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:33:11.59359Z"}],"euvd":[{"id":"EUVD-2017-11073","description":"A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.","status":"published","published":"2022-06-20T20:10:19Z","modified":"2025-04-15T14:18:46Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:52:29.674488Z"}],"ghsa":[{"id":"GHSA-3754-735c-c4rm","title":"A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This...","description":"A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.","status":"published","published":"2022-06-21T00:00:44Z","modified":"2023-01-27T05:05:02Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:42:36.711116Z"}],"nvd":[{"id":"CVE-2017-20066","description":"A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.","status":"published","published":"2022-06-20T20:15:07.863Z","modified":"2026-06-17T01:15:06.257Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-284","CWE-863"],"updated_at":"2026-11-02T14:04:21.492973Z"}]}}