CVEvulnerability
CVE-2017-20066
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-06-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-284, CWE-863
Description
A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Affected configurations
• adminer login project adminer login 1.4.4
Related
References
- http://seclists.org/fulldisclosure/2017/Feb/96 Mailing List, Third Party Advisory
- https://sumofpwn.nl/advisory/2016/wordpress_adminer_plugin_allows_public__local__database_login.html Exploit, Third Party Advisory
- https://vuldb.com/?id.97384 Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2017/Feb/96 Mailing List, Third Party Advisory
- https://sumofpwn.nl/advisory/2016/wordpress_adminer_plugin_allows_public__local__database_login.html Exploit, Third Party Advisory
- https://vuldb.com/?id.97384 Third Party Advisory, VDB Entry