[SECURITY] [DLA 1311-1] adminer security update

Package : adminer Version : 3.3.3-1+deb7u1 CVE ID : CVE-2018-7667 Debian Bug : 893668 It was discovered that there was a server-side request forgery exploit in adminer, a web-based database administration tool. Adminer allowed unauthenticated connections to be initiated to arbitrary systems and...

DLA-1311-1 adminer - security update

Bulletin has no description...

openSUSE Security Update : adminer (openSUSE-2018-253)

This update for adminer fixes the following issues : - Sync up conditional sub-packages with devel package to disable uninstallable pacakges for boo1002214. - Update to version v4.4.0 for boo1083948 to resolve CVE-2018-7667 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter...

UBUNTU-CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter...

Design/Logic Flaw

Adminer through 4.3.1 has SSRF via the server parameter...

CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter...

DEBIAN-CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter...

CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter...

EUVD-2021-0529

Adminer through 4.3.1 has SSRF via the server parameter...

CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter...

CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter...

CVE-2018-7667

CVE-2018-7667 affects Adminer up to version 4.3.1, where an SSRF flaw exists via the server parameter. The issue enables an attacker to trigger server-side requests, potentially bypassing firewalls and probing internal resources. The vulnerability is rated high/critical (NVD CVSS v2 7.5, CVSS v3....

Adminer Server-Side Request Forgery Vulnerability

Adminer is a full-featured database management tool written in PHP that supports database software such as MySQL, MariaDB, PostgreSQL and SQLite. A server-side request forgery vulnerability exists in Adminer 4.3.1 and earlier versions. An attacker can exploit this vulnerability with the help of t...

Adminer v4.3.1 Server Side Request Forgery Exploit

Exploit for multiple platform in category web applications + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: apparition security Vendor: ==============...

Adminer 4.3.1 - Server-Side Request Forgery

Adminer 4.3.1 - Server-Side Request Forgery + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: apparition security Vendor: ============== www.adminer.org Product...

Adminer 4.3.1 Server-Side Request Forgery

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: apparition security Vendor: ============== www.adminer.org Product: ================ Adminer = v4.3.1 Adminer...

Adminer 4.3.1 - Server-Side Request Forgery

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: apparition security Vendor: ============== www.adminer.org Product: ================ Adminer = v4.3.1 Adminer...

Subrion CMS 4.1.5 Cross Site Scripting

| | Exploit Title: Subrion Cms Cross Site Scripting XSS | Exploit Author: Ashiyane Digital security Team | Vendor Homepage : https://subrion.org/ | Software Link: https://tools.subrion.org/get/latest.zip | Version: 4.1.5 | Date: 2017 - 07 - 9 | Tested on: Kali-Linux /FireFox | Exploit : System...

WordPress Adminer 1.4.4 Interface Exposure Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ WordPress Adminer plugin allows public local database login ------------------------------------------------------------------------ David Vaartjes, July 2016...