Adminer RCE via Unsanitized Server Field

Adminer, a lightweight database management tool, is affected by a remote code execution (RCE) vulnerability in versions before 5.4.3.

Due to insufficient sanitization of the 'server' field, unauthenticated attackers can inject ODBC parameters via semicolons, allowing them to write PHP code to the web root.

This vulnerability can be exploited when the trace file is accessed, leading to remote code execution.