271 matches found
CVE-2020-35186
The CVE-2020-35186 issue affects the official Adminer Docker images prior to 4.7.0-fastcgi, where the root account is created with a blank password. This configuration could allow a remote attacker to gain root access via the affected container deployment. Red Hat and NVD entries corroborate the ...
Docker Images Official Administrator Access Control Error Vulnerability
Docker is an open source application container engine from the American company Docker. It supports the creation of a container lightweight virtual machine and the deployment and running of applications on Linux systems, as well as the automated installation, deployment and upgrading of...
Mail.ru: Открытая админка 1C эмулятора
Staging testing versions of 1C-emulator and Adminer interfaces was available from external network without authentication on geekbrains.ru. This interfaces had no access to production data...
Cross-Site Scripting (XSS)
adminer is vulnerable to cross site scripting attacksXSS.The attack is possible because it does not sanitize the characters in the URL path, allowing an attacker to inject arbitrary script through the URL...
Adminer Editor Detection
The script sends a HTTP request to the remote server and tries to identify an Adminer Editor installation and it SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Adminer 4.3.1 up to 4.6.2 File Disclosure Vulnerability - Windows
Adminer is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adminer:adminer";...
Adminer 4.3.1 - 4.6.2 File Disclosure Vulnerability - Linux
Adminer is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adminer:adminer";...
Adminer < 4.7.8 SSRF Vulnerability - Linux
Adminer is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adminer < 4.7.8 SSRF Vulnerability - Windows
Adminer is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adminer Detection (HTTP)
HTTP based detection of Adminer. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.108531";...
WordPress Ari Adminer 1.1.12 Database Disclosure
Exploit Title : WordPress Ari Adminer Plugins 1.1.12 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 06/12/2018 Vendor Homepage : ari-soft.com wordpress.org/plugins/ari-adminer/ Software Download Link :...
Adminer script versions up to 4.6.2 contains file disclosure vulnerability
More info at https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability...
Adminer script versions up to 4.6.2 contains file disclosure vulnerability
More info at https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability...
Debian: Security Advisory (DLA-1311-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1311-1 : adminer security update
It was discovered that there was a server-side request forgery exploit in adminer, a web-based database administration tool. Adminer allowed unauthenticated connections to be initiated to arbitrary systems and ports which could bypass external firewalls to identify internal hosts or perform port...
[SECURITY] [DLA 1311-1] adminer security update
Package : adminer Version : 3.3.3-1+deb7u1 CVE ID : CVE-2018-7667 Debian Bug : 893668 It was discovered that there was a server-side request forgery exploit in adminer, a web-based database administration tool. Adminer allowed unauthenticated connections to be initiated to arbitrary systems and...
DLA-1311-1 adminer - security update
Bulletin has no description...
openSUSE Security Update : adminer (openSUSE-2018-253)
This update for adminer fixes the following issues : - Sync up conditional sub-packages with devel package to disable uninstallable pacakges for boo1002214. - Update to version v4.4.0 for boo1083948 to resolve CVE-2018-7667 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...
