https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:24:43.515943+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-47656 EUVD-2026-47656 2026-10-05T07:24:43.615240+00:00 EUVD-2026-47656 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35572 fkie_cve-2020-35572 2026-10-05T07:24:43.615294+00:00

Adminer through 4.7.8 allows XSS via the history parameter to the default URI.

 https://cve.radiocsirt.org/vuln/ghsa-9pgx-gcph-mpqr GHSA-9pgx-gcph-mpqr — vrana/adminer via XSS in the history parameter in SQL command 2026-10-05T07:24:43.615325+00:00

Affected: Packagist: vrana/adminer

### Impact Users of Adminer versions supporting SQL command (most versions, e.g. MySQL) using browsers not encoding URL parameters before sending to server (likely Edge, not Chrome, not Firefox) are affected.

### Patches Patched by 5c395afc, included in version [4.7.9](https://github.com/vrana/adminer/releases/tag/v4.7.9).

### Workarounds Use browser which encodes URL parameters (e.g. Chrome or Firefox).

### References https://sourceforge.net/p/adminer/bugs-and-features/775/

### For more information If you have any questions or comments about this advisory: * Comment at https://sourceforge.net/p/adminer/bugs-and-features/775/

 https://cve.radiocsirt.org/vuln/gsd-2020-35572 gsd-2020-35572 2026-10-05T07:24:43.615357+00:00 gsd-2020-35572 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-35572 UBUNTU-CVE-2020-35572 2026-10-05T07:24:43.615370+00:00

Affected: Ubuntu:Pro:20.04:LTS: adminer

Adminer through 4.7.8 allows XSS via the history parameter to the default URI.