4 matches found
The ADOdb sqlite3 driver allows SQL injection
Improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a sqlite3 database and calls the metaColumns, metaForeignKeys or metaIndexes methods with a crafted table name. Note that the indicated Severity corresponds to a...
10CVSS7.7AI score0.00468EPSS
SaveExploits0References7Affected Software1
SQL Injection
ADOdb is vulnerable to SQL Injection. The vulnerability is due to improper escaping due to the use of unsanitized user input in the pginsertid function when connected to a PostgreSQL database...
10CVSS7.1AI score0.00733EPSS
SaveExploits0References7Affected Software1
20