https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 04:29:00 +0000 https://db.gcve.eu/vuln/bdu:2026-12715 bdu:2026-12715 https://db.gcve.eu/vuln/bdu:2026-12715 https://db.gcve.eu/vuln/fkie_cve-2026-56703 <p>Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server.</p> <p>Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server.</p> https://db.gcve.eu/vuln/fkie_cve-2026-56703 https://db.gcve.eu/vuln/ghsa-j4fh-9p52-f987 <p>Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server.</p> <p>Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server.</p> https://db.gcve.eu/vuln/ghsa-j4fh-9p52-f987 https://db.gcve.eu/vuln/ubuntu-cve-2026-56703 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: adminer, Ubuntu:Pro:18.04:LTS: adminer, Ubuntu:Pro:20.04:LTS: adminer, Ubuntu:22.04:LTS: adminer, Ubuntu:24.04:LTS: adminer, Ubuntu:26.04:LTS: adminer</p> <p>Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: adminer, Ubuntu:Pro:18.04:LTS: adminer, Ubuntu:Pro:20.04:LTS: adminer, Ubuntu:22.04:LTS: adminer, Ubuntu:24.04:LTS: adminer, Ubuntu:26.04:LTS: adminer</p> <p>Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-56703