Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6825-1
HistoryJun 10, 2024 - 12:00 a.m.

ADOdb vulnerabilities

2024-06-1000:00:00
ubuntu.com
1
ubuntu
adodb
sql injection
xss
vulnerabilities
postgresql
authentication
16.04

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

7.6 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.2%

JSON

Releases

  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • libphp-adodb - ADOdb is a PHP database abstraction layer library

Details

It was discovered that the PDO driver in ADOdb was incorrectly handling
string quotes. A remote attacker could possibly use this issue to
perform SQL injection attacks. This issue only affected Ubuntu 16.04 LTS.
(CVE-2016-7405)

It was discovered that ADOdb was incorrectly handling GET parameters in
test.php. A remote attacker could possibly use this issue to execute
cross-site scripting (XSS) attacks. This issue only affected Ubuntu
16.04 LTS. (CVE-2016-4855)

Emmet Leahy discovered that ADOdb was incorrectly handling string quotes
in PostgreSQL connections. A remote attacker could possibly use this issue
to bypass authentication. (CVE-2021-3850)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchlibphp-adodb< 5.20.19-1ubuntu0.1UNKNOWN
Ubuntu20.04noarchlibphp-adodb< 5.20.16-1ubuntu0.1~esm1UNKNOWN
Ubuntu20.04noarchlibphp-adodb< 5.20.16-1UNKNOWN
Ubuntu18.04noarchlibphp-adodb< 5.20.9-1ubuntu0.1~esm1UNKNOWN
Ubuntu18.04noarchlibphp-adodb< 5.20.9-1UNKNOWN
Ubuntu16.04noarchlibphp-adodb< 5.20.3-1ubuntu1+esm1UNKNOWN
Ubuntu16.04noarchlibphp-adodb< 5.20.3-1ubuntu1UNKNOWN

Related

openvas 12
osv 9
nessus 10
gentoo 1
mageia 2
debiancve 3
gitlab 3
cve 3
ubuntucve 3
fedora 6
veracode 3
nvd 3
prion 3
github 3
cvelist 3
friendsofphp 1
jvn 1
huntr 1
redos 1
debian 2
openvas
openvas
Ubuntu: Security Advisory (USN-6825-1)
2024-06-11 00:00:00
Mageia: Security Advisory (MGASA-2016-0363)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-620-1)
2023-03-08 00:00:00
osv
osv
libphp-adodb vulnerabilities
2024-06-10 20:41:56
libphp-adodb - security update
2016-09-13 00:00:00
ADOdb Library SQL Injection
2022-05-17 02:37:05
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : ADOdb vulnerabilities (USN-6825-1)
2024-06-10 00:00:00
GLSA-201701-59 : ADOdb: Multiple vulnerabilities
2017-01-25 00:00:00
Fedora 23 : php-adodb (2016-14bc73b990)
2016-10-06 00:00:00
gentoo
gentoo
ADOdb: Multiple vulnerabilities
2017-01-24 00:00:00
mageia
mageia
Updated php-adodb packages fix security vulnerabilities
2016-11-04 01:53:34
Updated php-adodb packages fix security vulnerability
2022-02-12 20:31:35
debiancve
debiancve
CVE-2016-7405
2016-10-03 18:59:14
CVE-2016-4855
2017-05-12 18:29:00
CVE-2021-3850
2022-01-25 15:15:08
gitlab
gitlab
SQL Injection
2016-10-03 00:00:00
XSS vulnerability in old test script
2017-05-12 00:00:00
Authentication Bypass by Primary Weakness
2022-01-25 00:00:00
cve
cve
CVE-2016-7405
2016-10-03 18:59:14
CVE-2016-4855
2017-05-12 18:29:00
CVE-2021-3850
2022-01-25 15:15:08
ubuntucve
ubuntucve
CVE-2016-7405
2016-10-03 00:00:00
CVE-2016-4855
2017-05-12 00:00:00
CVE-2021-3850
2022-01-25 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: php-adodb-5.20.6-2.fc23
2016-09-29 23:05:38
[SECURITY] Fedora 24 Update: php-adodb-5.20.6-2.fc24
2016-09-30 15:54:46
[SECURITY] Fedora 25 Update: php-adodb-5.20.6-2.fc25
2016-09-27 00:53:45
veracode
veracode
SQL Injection
2017-09-05 03:21:48
Cross-site Scripting (XSS)
2017-05-30 09:31:41
Authentication Bypass
2022-01-26 04:18:43
nvd
nvd
CVE-2016-7405
2016-10-03 18:59:14
CVE-2016-4855
2017-05-12 18:29:00
CVE-2021-3850
2022-01-25 15:15:08
prion
prion
Sql injection
2016-10-03 18:59:00
Cross site scripting
2017-05-12 18:29:00
Authentication flaw
2022-01-25 15:15:00
github
github
ADOdb Library SQL Injection
2022-05-17 02:37:05
ADOdb Cross-site scripting vulnerability in old test script
2022-05-17 02:37:30
Authentication Bypass in ADOdb/ADOdb
2022-01-27 15:23:19
cvelist
cvelist
CVE-2016-7405
2016-10-03 18:00:00
CVE-2016-4855
2017-05-12 18:00:00
CVE-2021-3850 Authentication Bypass by Primary Weakness in adodb/adodb
2022-01-25 14:20:11
friendsofphp
friendsofphp
XSS vulnerability in old test script
2016-08-28 23:50:00
jvn
jvn
JVN#48237713: ADOdb vulnerable to cross-site scripting
2016-09-06 00:00:00
huntr
huntr
in adodb/adodb
2021-10-28 16:05:21
redos
redos
ROS-20240403-06
2024-04-03 00:00:00
debian
debian
[SECURITY] [DLA 2912-1] libphp-adodb security update
2022-02-06 09:08:39
[SECURITY] [DSA 5101-1] libphp-adodb security update
2022-03-13 14:49:45

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

7.6 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.2%

JSON
Related for USN-6825-1
openvas12osv9nessus10gentoo1mageia2debiancve3gitlab3cve3ubuntucve3fedora6veracode3nvd3prion3github3cvelist3friendsofphp1jvn1huntr1redos1debian2