GHSA-P96F-P2P2-2G3H AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE

Summary This vulnerability is a patch bypass that exploits catastrophic backtracking in a regular expression used to filter ATTACH statements in AdminNeo's SQLite functionality. The original vulnerability CVE-2021-43008 allowed authenticated users to create PHP files through SQLite ATTACH...

AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE

Summary This vulnerability is a patch bypass that exploits catastrophic backtracking in a regular expression used to filter ATTACH statements in AdminNeo's SQLite functionality. The original vulnerability CVE-2021-43008 allowed authenticated users to create PHP files through SQLite ATTACH...

GHSA-Q5MP-GFJF-CF2J AdminNeo: RCE via SQLite VACUUM INTO (ATTACH Blocklist Bypass)

Summary Adminer blocks ATTACH queries for SQLite to prevent arbitrary file creation. However, VACUUM INTO is not blocked and achieves the same result: writing a database file containing attacker-controlled PHP code to any path with any extension. An authenticated SQLite user can write a web shell...