Microsoft Windows ADODB Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within msado15.dll. B...

Microsoft Windows ADODB Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the library...

Microsoft Windows ADODB Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. Interaction with a library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the module...

Microsoft Windows ADODB.Record Object File Overwrite Vulnerability

Microsoft Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. An overwrite vulnerability exists in the Microsoft Windows ADODB.Record object file. An attacker can exploit the vulnerability to overwrite arbitrary files...

SQL Injection

adodb-php contains a SQLi vulnerability...

SQL Injection

adodb-php contains a SQLi vulnerability...

MantisBT 'sql' Parameter SQL Injection Vulnerability (Feb 2018) - Windows

MantisBT is prone to an SQL injection SQLi vulnerability. Note: The vendor disputes the significance of this report because server.php is intended to execute arbitrary SQL statements on behalf of authenticated users from 127.0.0.1, and the issue does not have an authentication bypass...

CVE-2018-6382

MantisBT 2.10.0 allows local users to conduct SQL Injection attacks via the vendor/adodb/adodb-php/server.php sql parameter in a request to the 127.0.0.1 IP address. NOTE: the vendor disputes the significance of this report because server.php is intended to execute arbitrary SQL statements on...

SQL Injection

ADOdb is vulnerable to SQL injection attacks. A malicious user can inject arbitrary SQL query since the library incorrectly quotes the strings to be sent to the database using ADOConnection::qstr...

Cross-site Scripting (XSS)

ADOdb is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary script via a browser's url field when accessing one of ADOdb's test scripts...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4855

CVE-2016-4855 describes a cross-site scripting vulnerability in the PHP ADOdb library. The issue affects ADOdb versions prior to 5.20.6 and allows remote attackers to inject arbitrary script or HTML via unspecified vectors, with potential alteration of the user’s browser context. Public details c...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

XSS vulnerability in old test script

Cross-site scripting vulnerability in ADOdb allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

GLSA-201701-59 : ADOdb: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-59 ADOdb: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ADOdb. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, through the use of SQL injection or Cros...

ADOdb: Multiple vulnerabilities

Background ADOdb is an abstraction library for PHP creating a common API for a wide range of database backends. Description Multiple vulnerabilities have been discovered in ADOdb. Please review the CVE identifiers referenced below for details. Impact A remote attacker, through the use of SQL...