SSRF in adminer
Affected range
ECOSYSTEM: introduced 0; fixed 4.7.9<4.7.9Fixed versions: 4.7.9
Vulnerability intelligence Composer
vrana/adminer
Database management in a single PHP file.
Composer latest 6.1.0 Apache-2.0, GPL-2.0-only
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
6.1.0
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
High
8 active advisories
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Advisories
GHSA-2v82-5746-vwqc high
XSS in doc_link
Affected range
ECOSYSTEM: introduced 4.7.8; fixed 4.8.1>=4.7.8,<4.8.1Fixed versions: 4.8.1
GHSA-q4f2-39gr-45jh high
Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint
Affected range
ECOSYSTEM: introduced 4.6.2; fixed 5.4.2>=4.6.2,<5.4.2Fixed versions: 5.4.2
GHSA-mqh4-2mm8-g7w9 high
Adminer PHP Object Injection issue leads to Denial of Service
Affected range
ECOSYSTEM: introduced 0; last affected 4.8.1<=4.8.1 GHSA-97h7-mf38-g9mf high
Adminer file disclosure vulnerability
Affected range
ECOSYSTEM: introduced 4.3.1; fixed 4.6.3<4.6.3Fixed versions: 4.6.3
GHSA-rxfq-3vpc-vv72 high
Files or Directories Accessible to External Parties in Adminer
Affected range
ECOSYSTEM: introduced 1.12.0; fixed 4.6.3>=1.12.0,<4.6.3Fixed versions: 4.6.3
GHSA-43f8-p5w3-5m25 moderate
vrana/adminer vulnerable to SSRF by connecting to privileged ports
Affected range
ECOSYSTEM: introduced 0; fixed 4.7.8<4.7.8Fixed versions: 4.7.8
GHSA-9pgx-gcph-mpqr moderate
vrana/adminer via XSS in the history parameter in SQL command
Affected range
ECOSYSTEM: introduced 0; fixed 4.7.9<4.7.9Fixed versions: 4.7.9