7 matches found
sudowp-adminer
SudoWP Adminer(安全分支) 贡献者: SudoWP、WP Republic 原作者: Frank Bültge、Inpsyde 标签: adminer、database、security、cve-2021-21311、ssrf-patch 最低要求版本: 5.8 最高测试版本: 6.7 稳定版: 1.5.0 许可证: GPLv2 或更高版本 安全公告(CVE-2021-21311) 这是“Adminer”WordPress 插件的一个安全加固分支 。 威胁: 标准 Adminer 安装通常允许服务器端请求伪造(SSRF) 。攻击者可以利用登录表单强制服务器连接到内部服务(例...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Adminer vulnerabilities (USN-5271-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5271-1 advisory. It was discovered that Adminer did not escape data in the history parameter of the default URI. A remote attacker could possibly...
Exploit for Server-Side Request Forgery in Adminer
CVE-2021-21311 Description SSRFServer-side Request Forger...
USN-5271-1: Adminer vulnerabilities
It was discovered that Adminer did not escape data in the history parameter of the default URI. A remote attacker could possibly use this issue to perform cross-site scripting XSS attacks. This issue only affected Ubuntu 20.04 ESM. CVE-2020-35572 Adam Crosser and Brian Sizemore discovered that...
CVE-2021-21311
creationtimestamp| type| source ---|---|--- 2021-02-12 00:42:58+00:00| seen| https://t.me/cibsecurity/23505 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-21311.yaml 2025-09-29 18:10:02+00:00| seen|...
CVE-2021-21311
Adminer CVE-2021-21311 is a server-side request forgery (SSRF) flaw affecting Adminer versions before 4.7.9, especially builds bundling all drivers (e.g., adminer.php). The issue arises from error-message handling that can expose sensitive information, enabling an attacker to potentially access i...
CVE-2021-21311 SSRF in adminer
Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers e.g. adminer.php are affected. This is fixed in version 4.7.9...