Adodb Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Adodb Project records in CISA KEV

No Adodb Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Adodb 3 records MEDIUM

Records

3 records in Adodb · all components

TI-2016-06306 CVE-2016-7405 · GHSA-3fj4-q72x-x2g9

The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7…

MEDIUM 47

The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02984 Published 2016-10-03 Fixed in 5.20.7 CWE-89

TI-2021-02781 CVE-2021-3850 · GHSA-65mj-7c86-79jf

Authentication Bypass by Primary Weakness in adodb/adodb

MEDIUM 43

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0217 Published 2022-01-25 Fixed in 5.20.21, 5.21.4 CWE-305

TI-2016-04198 CVE-2016-4855 · GHSA-hhfw-xxhm-pf32

Cross-site scripting in ADOdb

LOW 31

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01946 Published 2017-05-12 Fixed in 5.20.6 CWE-79

Open these records in search →

Critical	2
High	0
Medium	1
Low	0
No CVSS	0