CyberRota Analysis
AI-GeneratedAdminer versions 5.3.0 through 5.4.2, when the sql-log plugin is enabled, are susceptible to an arbitrary file write vulnerability due to improper handling of the ns parameter in plugins/sql-log.php. This allows authenticated users to exploit path traversal sequences, enabling them to write malicious .sql files to any writable directory on the server. Organizations using these versions of Adminer with the sql-log plugin should prioritize patching to mitigate potential unauthorized file access and data compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences in the ns parameter to write arbitrary .sql files with attacker-controlled content to any writable directory on the host.