CVE-2026-56702 - Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP files by exploiting a permissive default extension allowlist. Attackers can upload PHP webshells to columns ending in _path and execute arbitrary code as the web-server user when uploadPath is web-served. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-18983 [高危] CVE-2026-18983 - The One User Avatar | User Profile Picture plugin for…
• CVE-2026-81931 [未知] CVE-2026-81931 - Unrestricted Upload of File with Dangerous Type in th…
• CVE-2026-77991 [未知] CVE-2026-77991 - Joomla Extension - joomlaeventmanager.net - Privilege…
• CVE-2026-77018 [高危] CVE-2026-77018 - The Workeera WordPress plugin before 1.0.6 does not …
• CVE-2026-75331 [中危] CVE-2026-75331 - tamguo 1.5.3 is vulnerable to Unrestricted File Uploa…
• CVE-2025-61165 [危急] CVE-2025-61165 - An arbitrary file upload vulnerability in the /v1/my_…
• CVE-2026-16601 [高危] CVE-2026-16601 - The CM Map Locations – Visualize and share your locat…
• CVE-2026-56702 [高危] CVE-2026-56702 - Adminer versions before 5.4.3 contain an unrestricted…