adminer kayıtları
adminer üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %14,3
- Silahlaştırılmış
- 1 · %14,3
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %85,7
- Yayından KEV’e ortanca
- 1691 gün
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-20 Improper Input Validation1
- CWE-502 Deserialization of Untrusted Data1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
88Hemen | CVE-2021-21311Silahlaştırılmış | Adminer is an open-source database management in a single PHP file.adminer · adminer · CWE-918 | Yüksek7,2 | KEV | %98,5 | 11 Şub 2021 |
40Planlayın | CVE-2018-7667İstismar yok | Adminer through 4.3.1 has SSRF via the server parameter.adminer · adminer · CWE-918 | Kritik9,8 | — | %4,4 | 5 Mar 2018 |
34İzleyin | CVE-2021-43008Kavram kanıtı | Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on thadminer · adminer | Yüksek7,5 | — | %13,6 | 4 Nis 2022 |
34İzleyin | CVE-2025-43960Kavram kanıtı | Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., usingadminer · adminer · CWE-502 | Yüksek8,6 | — | %0,7 | 25 Ağu 2025 |
31İzleyin | CVE-2026-25892Kavram kanıtı | Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpointadminer · adminer · CWE-20 | Yüksek7,5 | — | %1,9 | 9 Şub 2026 |
27İzleyin | CVE-2021-29625Kavram kanıtı | Adminer is open-source database management software.adminer · adminer · CWE-79 | Orta6,1 | — | %9,6 | 19 May 2021 |
25İzleyin | CVE-2020-35572İstismar yok | Adminer through 4.7.8 allows XSS via the history parameter to the default URI.adminer · adminer · CWE-79 | Orta6,1 | — | %2,0 | 9 Şub 2021 |
- CVE-2021-2131188Hemen
Adminer is an open-source database management in a single PHP file.
YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %98adminer · adminer11 Şub 2021
- CVE-2018-766740Planlayın
Adminer through 4.3.1 has SSRF via the server parameter.
KritikCVSS 9,8İstismar yokEPSS %4adminer · adminer5 Mar 2018
- CVE-2021-4300834İzleyin
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on th
YüksekCVSS 7,5Kavram kanıtıEPSS %14adminer · adminer4 Nis 2022
- CVE-2025-4396034İzleyin
Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using
YüksekCVSS 8,6Kavram kanıtıEPSS %1adminer · adminer25 Ağu 2025
- CVE-2026-2589231İzleyin
Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint
YüksekCVSS 7,5Kavram kanıtıEPSS %2adminer · adminer9 Şub 2026
- CVE-2021-2962527İzleyin
Adminer is open-source database management software.
OrtaCVSS 6,1Kavram kanıtıEPSS %10adminer · adminer19 May 2021
- CVE-2020-3557225İzleyin
Adminer through 4.7.8 allows XSS via the history parameter to the default URI.
OrtaCVSS 6,1İstismar yokEPSS %2adminer · adminer9 Şub 2021