Skip to content
Noroxi

Adminer records

7 published records for vendor adminer.

Researcher profile

Entered KEV
1 · 14.3%
Weaponized
1 · 14.3%
Pre-auth RCE
0
With a fix record
85.7%
Median publish → KEV
1691 days

Records by year

  1. 18
  2. 21
  3. 22
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

7 records
  • CVE-2021-21311
    88Now

    Adminer is an open-source database management in a single PHP file.

    HighCVSS 7.2KEVWeaponizedEPSS 98%

    adminer · adminerFeb 11, 2021

  • CVE-2018-7667
    40Plan

    Adminer through 4.3.1 has SSRF via the server parameter.

    CriticalCVSS 9.8No exploitEPSS 4%

    adminer · adminerMar 5, 2018

  • CVE-2021-43008
    34Monitor

    Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on th

    HighCVSS 7.5Proof of conceptEPSS 14%

    adminer · adminerApr 4, 2022

  • CVE-2025-43960
    34Monitor

    Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using

    HighCVSS 8.6Proof of conceptEPSS 1%

    adminer · adminerAug 25, 2025

  • CVE-2026-25892
    31Monitor

    Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint

    HighCVSS 7.5Proof of conceptEPSS 2%

    adminer · adminerFeb 9, 2026

  • CVE-2021-29625
    27Monitor

    Adminer is open-source database management software.

    MediumCVSS 6.1Proof of conceptEPSS 10%

    adminer · adminerMay 19, 2021

  • CVE-2020-35572
    25Monitor

    Adminer through 4.7.8 allows XSS via the history parameter to the default URI.

    MediumCVSS 6.1No exploitEPSS 2%

    adminer · adminerFeb 9, 2021