CVE-2016-4855 ADOdb Cross-site scripting vulnerability in old test script
MediumCVSS 6.1
EPSS 1.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adodb/adodb-php(Packagist) | < 5.20.6 | 5.20.6 |
| adodb/adodb-php(Packagist) | = v5.19 | No fix listed |
| adodb/adodb-php(Packagist) | = v5.20.0 | No fix listed |
| adodb/adodb-php(Packagist) | = v5.20.1 | No fix listed |
| adodb/adodb-php(Packagist) | = v5.20.2 | No fix listed |
| adodb/adodb-php(Packagist) | = v5.20.3 | No fix listed |
| adodb/adodb-php(Packagist) | = v5.20.4 | No fix listed |
| adodb/adodb-php(Packagist) | = v5.20.5 | No fix listed |
| debian/libphp-adodb(Debian:12) | < 5.20.6-1 | 5.20.6-1 |
| debian/libphp-adodb(Debian:14) | < 5.20.6-1 | 5.20.6-1 |
| debian/libphp-adodb(Debian:13) | < 5.20.6-1 | 5.20.6-1 |
| adodb project adodb | <= 5.20.5 | No fix listed |
| ADOdb | = versions prior to 5.20.6 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com third-party-advisory
- github.com patch
- github.com product
- github.com exploit
- GLSA-201701-59 vendor-advisory
- JVN#48237713 third-party-advisory vdb-entry
- 92753 third-party-advisory vdb-entry
- Debian Security Tracker CVE-2016-4855 vendor-advisory
- bugs.debian.org issue-tracking
- github.com