CVE-2006-0806: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via 1 the nextpage parameter in adodb-pager.inc.php and 2 other unspecified vectors related to PHPSELF...

ADOdb Library Cross Site Scripting

GulfTech Security Research February 18, 2006 Vendor : John Lim URL : http://adodb.sourceforge.net/ Version : ADOdb = 4.71 Risk : Cross Site Scripting Description: ADOdb is a database abstraction library for php used by a great deal of projects to provide support for a number of well known databas...

Update Protection against Multiple PHP-based Vulnerabilities

ADOdb is a database abstraction library for PHP. A vulnerability was detected in ADOdb due to the presence pf an insecure ADOdb script that can be exploited by remote attackers to execute malicious PHP commands on the target system. The 'Defacing Tool 2.0 by r3v3ng4ns' is a suite of php based...

GLSA-200602-02 : ADOdb: PostgreSQL command injection

The remote host is affected by the vulnerability described in GLSA-200602-02 ADOdb: PostgreSQL command injection Andy Staudacher discovered that ADOdb does not properly sanitize all parameters. Impact : By sending specifically crafted requests to an application that uses ADOdb and a PostgreSQL...

[SA18720] AgileBill ADOdb server.php Insecure Test Script Security Issue

TITLE: AgileBill ADOdb server.php Insecure Test Script Security Issue SECUNIA ADVISORY ID: SA18720 VERIFY ADVISORY: http://secunia.com/advisories/18720/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: AgileBill 1.x http://secunia.com/product/6224/...

ADOdb: PostgresSQL command injection

Background ADOdb is an abstraction library for PHP creating a common API for a wide range of database backends. Description Andy Staudacher discovered that ADOdb does not properly sanitize all parameters. Impact By sending specifically crafted requests to an application that uses ADOdb and a...

Bug for libs in php link directory 2.0

Program: PHPLD Php link directory Homepage: http://www.phplinkdirectory.com/ Language: PHP Version: 2.0 Php link directory use lib's how adodb, smarthy, phpmailer, etc., etc. but this lib's have bug's. Bugs: ADOdb PostgreSQL SQL Injection Vulnerability http://www.securityfocus.com/bid/16364...

Sql injection

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings...

CVE-2006-0410

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings...

CVE-2006-0410

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings...

DEBIAN-CVE-2006-0410

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings...

CVE-2006-0410

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings...

CVE-2006-0410

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings...

CVE-2006-0410

CVE-2006-0410 describes an SQL injection vulnerability in ADOdb prior to 4.71 when used with PostgreSQL. The root cause is insufficient input sanitisation, allowing remote attackers to craft inputs (notably involving binary strings) that lead to arbitrary SQL commands being executed. Reported imp...

CVE-2006-0410

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings...

CVE-2006-0410: Undefined Security Weakness

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings...

[SA18575] ADOdb PostgreSQL SQL Injection Vulnerability

TITLE: ADOdb PostgreSQL SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18575 VERIFY ADVISORY: http://secunia.com/advisories/18575/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: ADOdb 4.x http://secunia.com/product/6701/ DESCRIPTION: Andy Staudacher ha...

[SA18233] Xaraya ADOdb Insecure Test Scripts Security Issues

TITLE: Xaraya ADOdb Insecure Test Scripts Security Issues SECUNIA ADVISORY ID: SA18233 VERIFY ADVISORY: http://secunia.com/advisories/18233/ CRITICAL: Moderately critical IMPACT: Security Bypass, Exposure of system information, System access WHERE: From remote SOFTWARE: Xaraya 1.x...

secunia-ADOdb.txt

====================================================================== Secunia Research 09/01/2006 - ADOdb Insecure Test Scripts Security Issues - ====================================================================== Table of Contents Affected...

ADOdb server.php sql Parameter SQL Injection

The remote host is running ADOdb, a database abstraction library for PHP. The installed version of ADOdb includes a test script named 'server.php' that fails to sanitize user input to the 'sql' parameter before using it in database queries. An attacker can exploit this issue to launch SQL injecti...