CVE-2021-43008 PoC — SOURCEFORGE Adminer安全漏洞

Description

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability 

Readme

# CVE-2021-43008 - AdminerRead

<p align="center">
    Exploit tool for Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability 
    <br>
    <img alt="GitHub release (latest by date)" src="https://img.shields.io/github/v/release/p0dalirius/AdminerRead">
    <a href="https://twitter.com/intent/follow?screen_name=podalirius_" title="Follow"><img src="https://img.shields.io/twitter/follow/podalirius_?label=Podalirius&style=social"></a>
    <a href="https://www.youtube.com/c/Podalirius_?sub_confirmation=1" title="Subscribe"><img alt="YouTube Channel Subscribers" src="https://img.shields.io/youtube/channel/subscribers/UCF_x5O7CSfr82AfNVTKOv_A?style=social"></a>
    <br>
</p>

![](./docs/banner.png)

## Installation

```
git clone https://github.com/p0dalirius/AdminerRead
cd AdminerRead
sudo python3 setup.py install
```

## Usage

![](./docs/adminer.gif)

## Vulnerable versions

Adminer version 1.0 up to version 4.6.2 (included) File Read Vulnerability

![](./docs/vulnerable_versions.gif)

 ➡️ More detailed information about impacted versions in ![Vulnerable versions](./docs/Vulnerable_versions.md)

## Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.

## References
 - http://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability
 - https://podalirius.net/en/articles/writing-an-exploit-for-adminer-4.6.2-arbitrary-file-read-vulnerability/

File Snapshot

Remarks