271 matches found
Design/Logic Flaw
Adminer through 4.3.1 has SSRF via the server parameter...
DEBIAN-CVE-2018-7667
Adminer through 4.3.1 has SSRF via the server parameter...
CVE-2018-7667
Adminer through 4.3.1 has SSRF via the server parameter...
UBUNTU-CVE-2018-7667
Adminer through 4.3.1 has SSRF via the server parameter...
CVE-2018-7667
CVE-2018-7667 affects Adminer up to version 4.3.1, where an SSRF flaw exists via the server parameter. The issue enables an attacker to trigger server-side requests, potentially bypassing firewalls and probing internal resources. The vulnerability is rated high/critical (NVD CVSS v2 7.5, CVSS v3....
EUVD-2021-0529
Adminer through 4.3.1 has SSRF via the server parameter...
CVE-2018-7667
Adminer through 4.3.1 has SSRF via the server parameter...
CVE-2018-7667
Adminer through 4.3.1 has SSRF via the server parameter...
Adminer Server-Side Request Forgery Vulnerability
Adminer is a full-featured database management tool written in PHP that supports database software such as MySQL, MariaDB, PostgreSQL and SQLite. A server-side request forgery vulnerability exists in Adminer 4.3.1 and earlier versions. An attacker can exploit this vulnerability with the help of t...
Adminer v4.3.1 Server Side Request Forgery Exploit
Exploit for multiple platform in category web applications + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: apparition security Vendor: ==============...
Adminer 4.3.1 - Server-Side Request Forgery
Adminer 4.3.1 - Server-Side Request Forgery + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: apparition security Vendor: ============== www.adminer.org Product...
Adminer 4.3.1 Server-Side Request Forgery
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: apparition security Vendor: ============== www.adminer.org Product: ================ Adminer = v4.3.1 Adminer...
Adminer 4.3.1 - Server-Side Request Forgery
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: apparition security Vendor: ============== www.adminer.org Product: ================ Adminer = v4.3.1 Adminer...
Subrion CMS 4.1.5 Cross Site Scripting
| | Exploit Title: Subrion Cms Cross Site Scripting XSS | Exploit Author: Ashiyane Digital security Team | Vendor Homepage : https://subrion.org/ | Software Link: https://tools.subrion.org/get/latest.zip | Version: 4.1.5 | Date: 2017 - 07 - 9 | Tested on: Kali-Linux /FireFox | Exploit : System...
WordPress Adminer 1.4.4 Interface Exposure Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ WordPress Adminer plugin allows public local database login ------------------------------------------------------------------------ David Vaartjes, July 2016...
Adminer <= 1.4.5 - Security Bypass
The plugin is still affected and has been closed. https://example.com/wp-content/plugins/adminer/inc/editor/index.php...
WordPress Adminer 1.4.4 Interface Exposure
------------------------------------------------------------------------ WordPress Adminer plugin allows public local database login ------------------------------------------------------------------------ David Vaartjes, July 2016...
WordPress Adminer Plugin Allows Public Admin (Local) Database Login Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The WordPress Adminer plugin allows public administrative local database logins, which can be exploited by an attacker to log...
Internet Bug Bounty: Incorrect logic in MySQL & MariaDB protocol leads to remote SSRF/Remote file read
Overview Wrong logic in realization of LOAD DATA LOCAL INFILE function leads to remote attacker can read files from server. Problem exists in many MySQL-drivers and frameworks, on many programming languages, like Python, Java, PHP etc. For exploitation this vulnerability we need to connect to our...
