Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

adminer — Vulnerabilities & Security Advisories 23

All 23 CVE vulnerabilities found in adminer, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for Adminer, a lightweight database management tool developed by Johannes Schlemper. The collection compiles security flaws reported for this specific software, covering a broad time range that includes both recent disclosures and historical issues documented in public advisories. Readers can utilize this resource to track the evolution of security risks associated with the Adminer project, understand the specific weakness classes frequently targeted by attackers, and review the product's complete vulnerability history. By centralizing these records, the page facilitates a clear overview of how the software has responded to identified threats over time. It serves as a technical reference for security professionals and developers who need to assess the current security posture of their deployments or analyze patterns in vulnerability types affecting web-based database interfaces. The data focuses strictly on confirmed weaknesses, enabling users to correlate specific product versions with known defects without relying on unverified reports or promotional content. This structured approach supports informed decision-making regarding patching schedules and potential exposure risks in production environments.

Vendor: vrana

CVE ID Title CVSS Severity Published
CVE-2026-109347 Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass CWE-94 7.2 High 2026-10-12
CVE-2026-100698 Adminer before 6.0.2 Privileged-Port SSRF via host_port Regex CWE-918 5.8 Medium 2026-09-26
CVE-2026-100696 Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver CWE-918 5.8 Medium 2026-09-26
CVE-2026-100697 Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver CWE-918 8.6 High 2026-09-26
CVE-2026-100695 Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE CWE-79 6.1 Medium 2026-09-26
CVE-2026-56706 Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking CWE-330 6.8 Medium 2026-08-25
CVE-2026-56705 Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection CWE-73 9.8 Critical 2026-08-25
CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String CWE-79 6.1 Medium 2026-08-25
CVE-2026-56703 Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO CWE-94 7.2 High 2026-08-25
CVE-2026-56702 Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload CWE-434 8.8 High 2026-08-25
CVE-2026-34968 Adminer before 5.4.3 Arbitrary File Deletion via SQLite Drop CWE-22 8.1 High 2026-08-25
CVE-2026-34967 Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write CWE-73 5.4 Medium 2026-08-25
CVE-2026-34959 Adminer before 5.5.0 Open Redirect via X-Forwarded-Prefix CWE-20 4.7 Medium 2026-08-25
CVE-2026-34964 Adminer before 5.5.0 SSRF via PDO DSN Injection CWE-918 5.8 Medium 2026-08-25
CVE-2026-16434 Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass CWE-20 2.3 Low 2026-08-25
CVE-2026-15686 Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability CWE-253 - - 2026-08-20
CVE-2026-63771 Adminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix Header CWE-113 7.1 High 2026-07-20
CVE-2026-25892 Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint CWE-20 7.5 High 2026-02-09
CVE-2023-45195 Adminer and AdminerEvo SSRF CWE-918 5.3AI Medium AI 2024-06-24
CVE-2023-45196 Adminer and AdminerEvo denial of service via HTTP redirect CWE-400 7.5AI High AI 2024-06-24
CVE-2023-45197 Adminer and AdminerEvo vulnerable to directory traversal and file upload CWE-434 9.8 - 2024-06-21
CVE-2021-29625 XSS in doc_link CWE-79 7.5 High 2021-05-19
CVE-2021-21311 SSRF in adminer CWE-918 7.2 High 2021-02-11

All 23 known CVE vulnerabilities affecting adminer with full Chinese analysis, references, and POCs where available.