adminer vulnerabilities (Debian)
25 vulnerabilities.
-
adminerDebian Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass 8.6 High -
adminerDebian Adminer before 6.0.2 Privileged-Port SSRF via host_port Regex 6.9 Medium -
adminerDebian Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver 5.3 Medium -
adminerDebian Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver 6.9 Medium -
adminerDebian Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE 5.3 Medium -
adminerDebian Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking 6.1 Medium -
adminerDebian Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection 9.3 Critical -
adminerDebian Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String 5.3 Medium -
adminerDebian Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO 8.6 High -
adminerDebian Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload 7.1 High -
adminerDebian Adminer before 5.4.3 Arbitrary File Deletion via SQLite Drop 7.2 High -
adminerDebian Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write 5.3 Medium -
adminerDebian Adminer before 5.5.0 SSRF via PDO DSN Injection 6.9 Medium -
adminerDebian Adminer before 5.5.0 Open Redirect via X-Forwarded-Prefix 5.3 Medium -
adminerDebian Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass 2.3 Low -
adminerDebian Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability 7.2 High -
adminerDebian Adminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix Header 6.0 Medium -
adminerDebian Adminer PHP Object Injection issue leads to Denial of Service 8.6 High -
adminerDebian Adminer and AdminerEvo SSRF 6.9 Medium -
adminerDebian Adminer and AdminerEvo denial of service via HTTP redirect 6.9 Medium -
adminerDebian Files or Directories Accessible to External Parties in Adminer 7.5 High -
adminerDebian XSS in doc_link 7.5 High -
adminerDebian SSRF in adminer 7.2 High -
adminerDebian vrana/adminer via XSS in the history parameter in SQL command 6.1 Medium -
adminerDebian vrana/adminer vulnerable to SSRF by connecting to privileged ports 9.8 Critical