AdminerEvo vulnerabilities
We track 2 vulnerabilities in AdminerEvo products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2024.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest AdminerEvo vulnerabilities
- 7.5 High severity
Adminer: Uncontrolled Resource Consumption
Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer s
- 9.8 Critical severity
Adminer: Unrestricted Upload of File with Dangerous Type
The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory. The attacker can effectively guess the name of the uploaded file and execute it. Adminer is no longer supported