[HIGH] Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint

PKSA-5hbx-ykrq-c4p8 CVE-2026-25892 GHSA-q4f2-39gr-45jh

Affected version: >=4.6.2,<5.4.2

Reported by:
GitHub

[HIGH] Adminer PHP Object Injection issue leads to Denial of Service

PKSA-16w6-mwbq-xf2b CVE-2025-43960 GHSA-mqh4-2mm8-g7w9

Affected version: <=4.8.1

Reported by:
GitHub

[MEDIUM] vrana/adminer vulnerable to SSRF by connecting to privileged ports

PKSA-skhx-v6fz-wrt9 CVE-2018-7667 GHSA-43f8-p5w3-5m25

Affected version: <4.7.8

Reported by:
GitHub

[HIGH] SSRF in adminer

PKSA-3s27-sj6v-h4s9 CVE-2021-21311 GHSA-x5r2-hj5c-8jx6

Affected version: <4.7.9

Reported by:
GitHub

[MEDIUM] vrana/adminer via XSS in the history parameter in SQL command

PKSA-d61d-915d-qn8d CVE-2020-35572 GHSA-9pgx-gcph-mpqr

Affected version: <4.7.9

Reported by:
GitHub