Test ID:	1.3.6.1.4.1.25623.1.0.145993
Category:	Web application abuses
Title:	Adminer 4.6.1 < 4.8.1 XSS Vulnerability - Windows
Summary:	Adminer is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: Adminer is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: Users of MySQL, MariaDB, PgSQL and SQLite are affected. XSS is in most cases prevented by strict CSP in all modern browsers. The only exception is when Adminer is using a pdo_ extension to communicate with the database (it is used if the native extensions are not enabled). Affected Software/OS: Adminer version 4.6.1 through 4.8.0. Note: In modern browsers with strict CSP only version 4.7.8 through 4.8.0 is affected. Solution: Update to version 4.8.1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-29625 https://github.com/vrana/adminer/security/advisories/GHSA-2v82-5746-vwqc https://github.com/vrana/adminer/commit/4043092ec2c0de2258d60a99d0c5958637d051a7 https://sourceforge.net/p/adminer/bugs-and-features/797/
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.