CVE-2021-3850

CVE-2021-3850 affects libphp-adodb, a PHP database abstraction layer used with adodb/adodb. The flaw allows injection into the PostgreSQL connection string by bypassing adodb_addslashes(), potentially enabling authentication bypass or exposing server information, depending on usage. Patches exist...

CVE-2016-4855

CVE-2016-4855 describes a cross-site scripting vulnerability in the PHP ADOdb library. The issue affects ADOdb versions prior to 5.20.6 and allows remote attackers to inject arbitrary script or HTML via unspecified vectors, with potential alteration of the user’s browser context. Public details c...

CVE-2016-7405

CVE-2016-7405 affects the ADOdb Library for PHP (PDO driver). The qstr method can lead to remote SQL injection via incorrect quoting. Vulnerable releases are in the 5.x line up to before 5.20.7; fixed in 5.20.7+/later. Upgrading to a fixed version (e.g., 5.20.7 or newer such as 5.20.9 per distrib...