Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Adminer vulnerabilities (USN-5271-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5271-1 advisory. It was discovered that Adminer did not escape data in the history parameter of the default URI. A remote attacker could possibly...

USN-5271-1: Adminer vulnerabilities

It was discovered that Adminer did not escape data in the history parameter of the default URI. A remote attacker could possibly use this issue to perform cross-site scripting XSS attacks. This issue only affected Ubuntu 20.04 ESM. CVE-2020-35572 Adam Crosser and Brian Sizemore discovered that...

CVE-2020-35572

creationtimestamp| type| source ---|---|--- 2021-02-09 20:46:44+00:00| seen| https://t.me/cibsecurity/23321...

DEBIAN-CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

CVE-2020-35572 affects Adminer via an XSS in the history parameter of the default URI. The issue arises because user-controlled data in the history parameter is not properly escaped, enabling cross-site scripting. Several sources confirm Adminer versions prior to 4.7.9 are affected (Ubuntu USN-52...