CVE-2026-34967 — Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write
Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated u…
Published: 2026-08-25 · CVSS: 5.3 · CVSS 4.0
Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences in the ns parameter to write arbitrary .sql files with attacker-controlled content to any writable directory on the host.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7