Description
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.
Exploits (3)
nomisec
WORKING POC
88 stars
by p0dalirius · poc
https://github.com/p0dalirius/CVE-2021-43008-AdminerRead
nomisec
WORKING POC
by DaturaSaturated · poc
https://github.com/DaturaSaturated/Adminer-CVE-2021-43008
References (5)
Scores
CVSS v3
7.5
EPSS
0.8347
EPSS Percentile
99.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lab Environment
Details
Status
published
Products (3)
adminer/adminer
1.12.0 - 4.6.2
debian/debian_linux
9.0
vrana/adminer
1.12.0 - 4.6.3Packagist
Published
Apr 05, 2022
Tracked Since
Feb 18, 2026