Lucene search
+L

379 matches found

BDU FSTEC
BDU FSTEC
added 2024/04/05 12:0 a.m.14 views

The vulnerability of the adodb_addslashes() function in the adodb library, which allows a hacker to bypass the authentication process

The vulnerability of the adodbaddslashes function in the adodb library is related to incorrect authentication. Exploiting this vulnerability could allow an attacker to bypass the authentication process...

9.4CVSS7.7AI score0.0217EPSS
SaveExploits1References4Affected Software2
Redos
Redos
added 2024/04/04 12:0 a.m.24 views

ROS-20240403-06

A vulnerability in the adodbaddslashes function of the adodb library is related to improper authentication. Exploitation of the vulnerability could allow an attacker acting remotely to bypass authentication...

9.1CVSS7AI score0.0217EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.19 views

Debian: Security Advisory (DLA-620-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.02984EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/17 2:37 a.m.15 views

GHSA-HHFW-XXHM-PF32 ADOdb Cross-site scripting vulnerability in old test script

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6AI score0.01946EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/17 2:37 a.m.23 views

ADOdb Cross-site scripting vulnerability in old test script

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6.5AI score0.01946EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/17 2:37 a.m.25 views

GHSA-3FJ4-Q72X-X2G9 ADOdb Library SQL Injection

The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting...

9.8CVSS9.6AI score0.02984EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2022/05/17 2:37 a.m.22 views

ADOdb Library SQL Injection

The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting...

9.8CVSS8.1AI score0.02984EPSS
SaveExploits0References10Affected Software1
OpenVAS
OpenVAS
added 2022/03/15 12:0 a.m.17 views

Debian: Security Advisory (DSA-5101-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.3AI score0.0217EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2022/03/14 12:0 a.m.33 views

Debian DSA-5101-1 : libphp-adodb - security update

The remote Debian 10 / 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5101 advisory. Emmet Leahy reported that libphp-adodb, a PHP database abstraction layer library, allows to inject values into a PostgreSQL connection string. Depending on how the...

9.1CVSS8.1AI score0.0217EPSS
SaveExploits1References7
Debian
Debian
added 2022/03/13 2:49 p.m.96 views

[SECURITY] [DSA 5101-1] libphp-adodb security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5101-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 13, 2022 https://www.debian.org/security/faq -...

9.1CVSS9.2AI score0.0217EPSS
SaveExploits1
OSV
OSV
added 2022/03/13 12:0 a.m.24 views

DSA-5101-1 libphp-adodb - security update

Bulletin has no description...

9.1CVSS9.1AI score0.0217EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/02/13 12:0 a.m.18 views

Mageia: Security Advisory (MGASA-2022-0056)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.3AI score0.0217EPSS
SaveExploits1References4
Mageia
Mageia
added 2022/02/12 5:31 p.m.49 views

Updated php-adodb packages fix security vulnerability

Security hotfix release addressing a critical vulnerability in PostgreSQL connections CVE-2021-3850 Additional fixes: Fix usage of getmagic functions 619 657 Fix PHP warning in rs2rs function 679 pdo: Fix Fatal error in query 666 pdo: Fix undefined variable 678 pgsql: Fix Fatal error in close...

9.1CVSS1.4AI score0.0217EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/02/07 12:0 a.m.17 views

Debian: Security Advisory (DLA-2912-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.3AI score0.0217EPSS
SaveExploits1References4
Debian
Debian
added 2022/02/06 9:8 a.m.92 views

[SECURITY] [DLA 2912-1] libphp-adodb security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2912-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 06, 2022 https://wiki.debian.org/LTS -...

9.1CVSS9.2AI score0.0217EPSS
SaveExploits1
OSV
OSV
added 2022/02/06 12:0 a.m.27 views

DLA-2912-1 libphp-adodb - security update

Bulletin has no description...

9.1CVSS9.1AI score0.0217EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/02/06 12:0 a.m.35 views

Debian DLA-2912-1 : libphp-adodb - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2912 advisory. It was found that in libphp-adodb, a PHP database abstraction layer library, an attacker can inject values into the PostgreSQL connection string by bypassing adodbaddslashe...

9.1CVSS8AI score0.0217EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.18 views

Mageia: Security Advisory (MGASA-2016-0363)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.02984EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/01/27 3:23 p.m.35 views

Authentication Bypass in ADOdb/ADOdb

Impact An attacker can inject values into a PostgreSQL connection string by providing a parameter surrounded by single quotes. Depending on how the library is used in the client software, this may allow an attacker to bypass the login process, gain access to the server's IP address, etc. Patches...

9.1CVSS8.7AI score0.0217EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2022/01/27 3:23 p.m.30 views

GHSA-65MJ-7C86-79JF Authentication Bypass in ADOdb/ADOdb

Impact An attacker can inject values into a PostgreSQL connection string by providing a parameter surrounded by single quotes. Depending on how the library is used in the client software, this may allow an attacker to bypass the login process, gain access to the server's IP address, etc. Patches...

9.1CVSS9.1AI score0.0217EPSS
SaveExploits1References9
Rows per page
Query Builder