SQL Injection

adodb-php contains a SQLi vulnerability...

MantisBT 'sql' Parameter SQL Injection Vulnerability (Feb 2018) - Windows

MantisBT is prone to an SQL injection SQLi vulnerability. Note: The vendor disputes the significance of this report because server.php is intended to execute arbitrary SQL statements on behalf of authenticated users from 127.0.0.1, and the issue does not have an authentication bypass...

CVE-2018-6382

MantisBT 2.10.0 allows local users to conduct SQL Injection attacks via the vendor/adodb/adodb-php/server.php sql parameter in a request to the 127.0.0.1 IP address. NOTE: the vendor disputes the significance of this report because server.php is intended to execute arbitrary SQL statements on...

SQL Injection

ADOdb is vulnerable to SQL injection attacks. A malicious user can inject arbitrary SQL query since the library incorrectly quotes the strings to be sent to the database using ADOConnection::qstr...

Cross-site Scripting (XSS)

ADOdb is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary script via a browser's url field when accessing one of ADOdb's test scripts...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4855

CVE-2016-4855 describes a cross-site scripting vulnerability in the PHP ADOdb library. The issue affects ADOdb versions prior to 5.20.6 and allows remote attackers to inject arbitrary script or HTML via unspecified vectors, with potential alteration of the user’s browser context. Public details c...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

XSS vulnerability in old test script

Cross-site scripting vulnerability in ADOdb allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

GLSA-201701-59 : ADOdb: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-59 ADOdb: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ADOdb. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, through the use of SQL injection or Cros...

ADOdb: Multiple vulnerabilities

Background ADOdb is an abstraction library for PHP creating a common API for a wide range of database backends. Description Multiple vulnerabilities have been discovered in ADOdb. Please review the CVE identifiers referenced below for details. Impact A remote attacker, through the use of SQL...

Fedora Update for php-adodb FEDORA-2016-c5ec2c17e6

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-adodb FEDORA-2016-47f8ba6b94

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : php-adodb (2016-47f8ba6b94)

Security fix for CVE-2016-4855 1373374 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

Fedora 25 : php-adodb (2016-c5ec2c17e6)

Security fix for CVE-2016-7405 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

MGASA-2016-0363 Updated php-adodb packages fix security vulnerabilities

The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting. CVE-2016-7405 Cross Site Scripting vulnerability in test script CVE-2016-4855...