Количество 5
Количество 5
CVE-2026-34968
Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db[] parameter to delete any files writable by the PHP process.
CVE-2026-34968
Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db[] parameter to delete any files writable by the PHP process.
CVE-2026-34968
Adminer before 5.4.3 contains an arbitrary file deletion vulnerability ...
GHSA-vfp8-hfj6-qmr2
Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db[] parameter to delete any files writable by the PHP process.
BDU:2026-12714
Уязвимость драйвера SQLite программного обеспечения для управления базами данных Adminer, позволяющая нарушителю получить доступ на удаление произвольных файлов
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-34968 Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db[] parameter to delete any files writable by the PHP process. | CVSS3: 8.1 | 0% Низкий | 20 дней назад |
 | CVE-2026-34968 Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db[] parameter to delete any files writable by the PHP process. | CVSS3: 8.1 | 0% Низкий | 20 дней назад |
| CVE-2026-34968 Adminer before 5.4.3 contains an arbitrary file deletion vulnerability ... | CVSS3: 8.1 | 0% Низкий | 20 дней назад |
| GHSA-vfp8-hfj6-qmr2 Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db[] parameter to delete any files writable by the PHP process. | CVSS3: 8.1 | 0% Низкий | 20 дней назад |
 | BDU:2026-12714 Уязвимость драйвера SQLite программного обеспечения для управления базами данных Adminer, позволяющая нарушителю получить доступ на удаление произвольных файлов | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу