Lucene search

K
redosRedosROS-20240702-05
HistoryJul 02, 2024 - 12:00 a.m.

ROS-20240702-05

2024-07-0200:00:00
redos.red-soft.ru
6
vulnerability
adodb library
pdo driver
remote attackers
sql injection
misquoted vectors

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low

A vulnerability in the qstr method in the adodb library PDO driver is associated with the ability for remote attackers to
to conduct SQL injection attacks using vectors associated with misquoted vectors.
Exploitation of the vulnerability could allow an attacker acting remotely to conduct an attack using a
SQL injection

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64php-adodb< 5.22.7-1UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low