15 matches found
Adminer-CVE-2021-43008
Adminer CVE-2021-43008 PoC 针对 CVE-2021-43008 的概念验证漏洞利用代码，影响 Adminer。 该漏洞允许恶意的 MySQL 服务器在启用 LOAD DATA LOCAL INFILE 时从客户端机器请求任意本地文件。 此存储库包含用于复现攻击的工具。 存储库内容 exploit.py Python 脚本，用于自动化与 Adminer 的交互。 功能： 向 Adminer 进行身份验证 提取 CSRF 令牌 发送 SQL 查询 触发 LOAD DATA LOCAL INFILE 解析返回的文件内容 setupmysqlserver.sh...
Exploit for CVE-2021-43008
CVE-2021-43008 — Vulnérabilité Adminer Lecture arbi...
Linux Distros Unpatched Vulnerability : CVE-2021-43008
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by...
SUSE CVE-2021-43008
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...
Debian DLA-3002-1 : adminer - LTS security update
The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3002 advisory. - Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting th...
[SECURITY] [DLA 3002-1] adminer security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3002-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 13, 2022 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...
Adminer 1.12.0 - 4.6.2 Information Disclosure Vulnerability
Adminer is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adminer:adminer";...
CVE-2021-43008
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...
CVE-2021-43008
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...
CVE-2021-43008
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...
CVE-2021-43008
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...
CVE-2021-43008
The CVE-2021-43008 vulnerability affects Adminer ≤ 4.6.2, where improper access control allows an attacker-controlled remote MySQL server to trigger Adminer to read a local file via LOAD DATA LOCAL INFILE, exposing sensitive files (e.g., /etc/passwd). The issue can enable Arbitrary File Read on t...
CVE-2021-43008
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...
CVE-2021-43008
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...