https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T20:23:36.849633+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2026-12785 bdu:2026-12785 2026-10-02T20:23:37.275300+00:00 bdu:2026-12785 https://vulnerability.circl.lu/vuln/fkie_cve-2026-56705 fkie_cve-2026-56705 2026-10-02T20:23:37.275415+00:00

Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root, achieving remote code execution when the trace file is accessed.

 https://vulnerability.circl.lu/vuln/ghsa-34q8-53jm-qc2r GHSA-34q8-53jm-qc2r 2026-10-02T20:23:37.275513+00:00

Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root, achieving remote code execution when the trace file is accessed.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-56705 UBUNTU-CVE-2026-56705 2026-10-02T20:23:37.275568+00:00

Affected: Ubuntu:Pro:16.04:LTS: adminer, Ubuntu:Pro:18.04:LTS: adminer, Ubuntu:Pro:20.04:LTS: adminer, Ubuntu:22.04:LTS: adminer, Ubuntu:24.04:LTS: adminer, Ubuntu:26.04:LTS: adminer

Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root, achieving remote code execution when the trace file is accessed.