Approved changes feed: RSS · Atom

cpe:2.3:a:adminerevo:adminerevo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdminerevo (db10e951-94cf-56b2-90e2-67656710b71d)
ProductAdminerevo (babc5aa3-100f-585a-acae-566d3c735a86)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/adminerevo/adminerevo purl2cpe 2026-06-01 10:15:59.754193

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-45197 vulnerable 2026-06-08 06:12:42.182919 Adminer and AdminerEvo vulnerable to directory traversal and file upload
The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory. The attacker can effectively guess the name of the uploaded file and execute it. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.3.
Published: 2024-06-21T14:28:36.476Z
Updated: 2024-08-02T20:14:19.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45196 vulnerable 2026-06-08 06:12:42.178355 Adminer and AdminerEvo denial of service via HTTP redirect
Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.
Published: 2024-06-24T20:48:21.534Z
Updated: 2024-08-02T20:14:20.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45195 vulnerable 2026-06-08 06:12:42.177612 Adminer and AdminerEvo SSRF
Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.
Published: 2024-06-24T21:06:09.735Z
Updated: 2024-08-02T20:14:19.950Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.