CVE-2026-59978

AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated ?script=version endpoint accepts POST data without origin, CSRF or parameter-type validation. A version parameter becomes a PHP array that bootstrap.inc.php serializes into the shared...

CVE-2026-59978

AdminNeo , a PHP-based database management tool, is vulnerable to a Denial of Service (DoS) via an array injection in the ?script=version endpoint. In versions 4.6.2 through 5.5.0 , the application fails to validate the request origin, CSRF tokens, or parameter types. An unauthenticated attacker ...

CVE-2026-59978 AdminNeo: version-cache array injection causes persistent denial of service

AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated ?script=version endpoint accepts POST data without origin, CSRF or parameter-type validation. A version parameter becomes a PHP array that bootstrap.inc.php serializes into the shared...

CVE-2026-59978: adminneo-org adminneo: AdminNeo is a full-featured database management tool written in PHP

AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated ?script=version endpoint accepts POST data without origin, CSRF or parameter-type validation. A version parameter becomes a PHP array that bootstrap.inc.php serializes into the shared...

CVE-2006-4870: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter in 1 inc/design.inc.php or 2 inc/admindesign.inc.php...