ID:7735 - Exploit for Files or Directories Accessible to External Parties in Adminer - CVE-2021-43008

 
Main Vulnerability Database Exploits ID:7735 - Exploit for Files or Directories Accessible to External Parties in Adminer - CVE-2021-43008

ID:7735 - Exploit for Files or Directories Accessible to External Parties in Adminer - CVE-2021-43008

Published: May 11, 2022


Vulnerability identifier: #VU63006
Vulnerability risk: Medium
CVE-ID: CVE-2021-43008
CWE-ID: CWE-552
Exploitation vector: Remote access
Vulnerable software:
Adminer

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a MySQL database issue. A remote attacker can read database credentials and steal data.


Remediation

Install updates from vendor's website.