Exploit for CVE-2026-56705

cve · 2026-08-25

Description

Unauthenticated RCE in Adminer before 5.4.3 via MSSQL PDO DSN ODBC parameter injection.

Entry point

Parameterauth[server] · request body

Pathadminer.php

Unauthenticated attacker can inject ODBC parameters via semicolons in the DSN server field, potentially writing a web shell to the web root.

CVSS 9.8 for CVE-2026-56705

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

EPSS Score

0.5%higher than 40.5% of all CVEs

Updated 2026-08-27

CVE Information

References

https://github.com/vrana/adminer/security/advisories/GHSA-r4x9-5m63-3vxw

https://www.vulncheck.com/advisories/adminer-before-remote-code-execution-via-mssql-pdo-dsn-injection

Exploit Details

Modified:2026-08-25 16:16

Last Seen:2026-08-25 18:33

Reporter:VulnCheck

Tags

AdminerRemote Code ExecutionPDO DSN InjectionMSSQL ODBCUnauthenticatedTraceFile

Other exploits for CVE-2026-56705

Exploit-CVE-2026-56705

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Exploit for CVE-2026-56705

2026-08-26 ChiefYoruGITHUB

Exploit for CVE-2026-56705

2026-08-25 Boreas37GITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-56705
Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root, achieving remote code execution when the trace file is accessed.