CWE-205
ISO27001-A.14.2.5
OWASP 2017-A6
WASC-13

Adminer Detected

Severity:
Information
Summary

Invicti identified that Adminer is publicly accessible on the target server. Adminer is an application written in the PHP language that provides a web-based interface for the administration of RDBMSs.

Impact

An attacker can access, modify or delete all databases.

Remediation

Configure your web server to prevent public access to the Adminer directory / page by implementing access control mechanisms.

Required Skills for Successful Exploitation
Actions To Take
Vulnerability Index

You can search and find all vulnerabilities

Featured resources

Blog

Strengthening enterprise application security: Invicti acquires Kondukto

Blog

Modern AppSec KPIs: Moving from scan counts to real risk reduction

Blog

Friends don’t let friends shift left: Shift smarter with DAST-first AppSec

Blog

Vibe talking: Dan Murphy on the promises, pitfalls, and insecurities of vibe coding

Blog

Strengthening enterprise application security: Invicti acquires Kondukto

Blog

Modern AppSec KPIs: Moving from scan counts to real risk reduction

Blog

Friends don’t let friends shift left: Shift smarter with DAST-first AppSec

Blog

Vibe talking: Dan Murphy on the promises, pitfalls, and insecurities of vibe coding