vrana/adminer via XSS in the history parameter in SQL command

Impact Users of Adminer versions supporting SQL command most versions, e.g. MySQL using browsers not encoding URL parameters before sending to server likely Edge, not Chrome, not Firefox are affected. Patches Patched by 5c395afc, included in version 4.7.9. Workarounds Use browser which encodes UR...

GHSA-9PGX-GCPH-MPQR vrana/adminer via XSS in the history parameter in SQL command

Impact Users of Adminer versions supporting SQL command most versions, e.g. MySQL using browsers not encoding URL parameters before sending to server likely Edge, not Chrome, not Firefox are affected. Patches Patched by 5c395afc, included in version 4.7.9. Workarounds Use browser which encodes UR...

Cross-Site Scripting (XSS)

Adminer is vulnerable to cross-site scripting. The vulnerability exists via the history parameter to the default URI...

PT-2021-14409

Name of the Vulnerable Software and Affected Versions: Adminer versions 4.0.0 through 4.7.9 Description: Adminer is an open-source database management in a single PHP file. There is a server-side request forgery vulnerability in Adminer versions bundling all drivers, such as adminer.php. This iss...

SOURCEFORGE Adminer Code Issue Vulnerability

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. It provides database management in a single PHP file. A code issue vulnerability exists in SOURCEFORGE Adminer that arises from improper design or implementation during code development of a web-based system or product...

CVE-2021-21311: Server-Side Request Forgery (SSRF)

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers e.g. adminer.php are affected. This is fixed in version 4.7.9...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

DEBIAN-CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

Design/Logic Flaw

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

UBUNTU-CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572

CVE-2020-35572 affects Adminer via an XSS in the history parameter of the default URI. The issue arises because user-controlled data in the history parameter is not properly escaped, enabling cross-site scripting. Several sources confirm Adminer versions prior to 4.7.9 are affected (Ubuntu USN-52...

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35572: Improper Neutralization of Input During Web Page Generation

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

CVE-2020-35186

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35186

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

Default credentials

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35186

The CVE-2020-35186 issue affects the official Adminer Docker images prior to 4.7.0-fastcgi, where the root account is created with a blank password. This configuration could allow a remote attacker to gain root access via the affected container deployment. Red Hat and NVD entries corroborate the ...