vrana/adminer vulnerabilities (Packagist)

8 vulnerabilities.

• vrana/adminer Packagist Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint CVE-2026-25892 Fix available 7.5 HighFebruary 9, 2026
• vrana/adminer Packagist Adminer PHP Object Injection issue leads to Denial of Service CVE-2025-43960 Public exploit 8.6 HighAugust 25, 2025
• vrana/adminer Packagist Adminer file disclosure vulnerability GHSA-97h7-mf38-g9mf Fix available 7.5 HighJune 7, 2024
• vrana/adminer Packagist Files or Directories Accessible to External Parties in Adminer CVE-2021-43008 Public exploitFix available EPSS 13.6% 7.5 HighApril 5, 2022
• vrana/adminer Packagist XSS in doc_link CVE-2021-29625 Fix available 7.5 HighMay 19, 2021
• vrana/adminer Packagist SSRF in adminer CVE-2021-21311 In KEVPublic exploitFix available EPSS 98.5% 7.2 HighFebruary 11, 2021
• vrana/adminer Packagist vrana/adminer via XSS in the history parameter in SQL command CVE-2020-35572 Fix available 6.1 MediumFebruary 9, 2021
• vrana/adminer Packagist vrana/adminer vulnerable to SSRF by connecting to privileged ports CVE-2018-7667 Fix available 9.8 CriticalMarch 5, 2018