Adminer through 4.7.8 allows XSS via the history parameter to the default URI.
We have discovered 297 live websites that are affected by CVE-2020-35572.
| Product | |
| Category | Database Managers |
| Vulnerable Domains | 297 live websites (62% of Adminer install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 22 versions ( 61% of all versions) |
| 101 websites | |
| 75 websites | |
| 43 websites | |
| 14 websites | |
| 9 websites | |
| 8 websites | |
| 6 websites | |
| 5 websites | |
| 5 websites | |
| 4 websites |
| .com | 107 websites |
| .cz | 71 websites |
| .ru | 13 websites |
| .org | 12 websites |
| .net | 8 websites |
| .de | 8 websites |
| .nl | 7 websites |
| .eu | 7 websites |
| .ch | 5 websites |
| .info | 3 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ******.***.pl | ***,*** | ||
| *******.pl | ***,*** | ||
| ****.*****.com | ***,*** | ||
| *********.com | ***,*** | ||
| **************.ru | ***,*** | ||
| ***.*********.com | ***,*** | ||
| ***********.************.com | ***,*** | ||
| ****.io | ***,*** | ||
| *********.*************.com | ***,*** | ||
| *********.com | ***,*** |