Arbitrary File Read via Improper Access Control in Adminer 1.12.0–4.6.2

This repository provides a proof-of-concept exploit for CVE-2021-43008, a file disclosure vulnerability in Adminer <= 4.6.2. The exploit consists of a rogue MySQL server implemented in Python (rogue_mysql_server/rogue_mysql_server.py), which, when connected to by a vulnerable Adminer instance, abuses the MySQL protocol to request arbitrary files from the Adminer server using the LOAD DATA LOCAL INFILE command. The exploit is orchestrated using Docker Compose, which sets up three services: a vulnerable Adminer instance, a legitimate MySQL server, and the rogue MySQL server. The main exploit logic is in the Python script, which listens on TCP port 33306 and, upon connection, requests files such as /etc/passwd from Adminer. When Adminer responds with the file contents, the rogue server saves them locally. The repository also includes documentation (README.md) explaining the vulnerability, exploitation steps, and mitigation strategies. No detection scripts or fake exploits are present; the code is a functional PoC for the described vulnerability.

This repository contains a proof-of-concept exploit targeting Adminer (a web-based database management tool) in conjunction with a MySQL/MariaDB server. The exploit consists of a Python script (exploit.py) and a Bash setup script (script.sh). The Bash script configures the MySQL server to allow remote connections, enables the 'local_infile' option, and creates a user with full privileges. The Python script then logs into Adminer using the configured credentials and issues SQL queries to read arbitrary files from the server (such as /flag.txt) using the LOAD DATA LOCAL INFILE command, storing the results in a database table that can be read back via Adminer. The exploit demonstrates the risk of misconfigured Adminer and MySQL/MariaDB servers, particularly when 'local_infile' is enabled and Adminer is exposed to untrusted users. The README simply instructs to start the setup script. No hardcoded CVE is referenced, but the technique is a known class of file read vulnerabilities in database management interfaces.

This repository provides an operational Python exploit (AdminerRead.py) for CVE-2021-43008, targeting Adminer versions 1.0 through 4.6.2. The exploit abuses an arbitrary file read vulnerability in the Adminer web interface, allowing an attacker with network access and valid database credentials to retrieve files from the server's filesystem. The main script, AdminerRead.py, automates the exploitation process, including authentication, file enumeration, and file retrieval. The repository includes wordlists of common sensitive files (e.g., /etc/passwd, /etc/shadow, SSH keys, web server configs) to facilitate automated file discovery. Supporting files include documentation, Dockerfiles for testing, and Makefiles for environment setup. The exploit is not part of a framework and is a standalone operational tool.