GoogleOSV:CVE-2020-35572

HistoryFeb 09, 2021 - 6:15 p.m.

CVE-2020-35572

2021-02-0918:15:44

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.9%

JSON

Adminer through 4.7.8 allows XSS via the history parameter to the default URI.

CPENameOperatorVersion
adminereq4.7.0
adminereq4.6.1
adminereq3.5.1
adminereq3.6.1
adminereq4.2.3
adminereq3.3.3
adminereq3.7.1
adminereq4.0.2
adminereq4.6.2
adminereq4.7.3

Name	Operator	Version
adminer	eq	4.7.0
adminer	eq	4.6.1
adminer	eq	3.5.1
adminer	eq	3.6.1
adminer	eq	4.2.3
adminer	eq	3.3.3
adminer	eq	3.7.1
adminer	eq	4.0.2
adminer	eq	4.6.2
adminer	eq	4.7.3

Rows per page:

1-10 of 481

References

sourceforge.net/p/adminer/bugs-and-features/775/

sourceforge.net/p/adminer/news/