SOURCEFORGE Adminer Code Issue Vulnerability

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. It provides database management in a single PHP file. A code issue vulnerability exists in SOURCEFORGE Adminer that arises from improper design or implementation during code development of a web-based system or product...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

DEBIAN-CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

Design/Logic Flaw

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

UBUNTU-CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

CVE-2020-35572 affects Adminer via an XSS in the history parameter of the default URI. The issue arises because user-controlled data in the history parameter is not properly escaped, enabling cross-site scripting. Several sources confirm Adminer versions prior to 4.7.9 are affected (Ubuntu USN-52...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

PT-2021-11803

Name of the Vulnerable Software and Affected Versions: Adminer versions 4.7.8 and earlier Description: The issue allows XSS via the history parameter to the default URI. Users of Adminer using browsers that do not encode URL parameters before sending them to the server are affected...

CVE-2020-35572: Improper Neutralization of Input During Web Page Generation

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35186

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35186

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

Default credentials

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35186

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35186

The CVE-2020-35186 issue affects the official Adminer Docker images prior to 4.7.0-fastcgi, where the root account is created with a blank password. This configuration could allow a remote attacker to gain root access via the affected container deployment. Red Hat and NVD entries corroborate the ...

CVE-2020-35186: Missing Authentication for Critical Function

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

PT-2020-17276

Name of the Vulnerable Software and Affected Versions adminer versions prior to 4.7.0-fastcgi Description The official adminer docker images contain a blank password for a root user. Systems using the adminer docker container deployed by affected versions of the docker image may allow a remote...