adodb project vulnerabilities

Products

• adodb 3

Latest adodb project CVEs

Newest publication first

1. CVE-2021-3850 Authentication Bypass by Primary Weakness in adodb/adodb

   Published 2022-01-25

   Critical·CVSS 9.1 EPSS 2.2%

   Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.

2. CVE-2016-4855 ADOdb Cross-site scripting vulnerability in old test script

   Published 2017-05-12

   Medium·CVSS 6.1 EPSS 1.9% PoC

   Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

3. CVE-2016-7405 ADOdb Library SQL Injection

   Published 2016-10-03

   Critical·CVSS 9.8 EPSS 3.0%

   The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.