Lucene search
Veracode Vulnerability DatabaseVERACODE:33894HistoryJan 26, 2022 - 4:18 a.m.
Authentication Bypass
2022-01-2604:18:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
adodb-php
authentication bypass
postgresql
EPSS
0.005
Percentile
77.5%
adodb/adodb-php is vulnerable to authentication bypass. The vulnerability exists in the adodb_addslashes function of adodb-postgres64.inc.php, allowing an attacker to inject values into the PostgreSQL connection by providing a parameter surrounded by the single quotes.
References
github.com/adodb/adodb/commit/952de6c4273d9b1e91c2b838044f8c2111150c29
github.com/ADOdb/ADOdb/issues/793
github.com/ADOdb/ADOdb/security/advisories/GHSA-65mj-7c86-79jf
huntr.dev/bounties/bdf5f216-4499-4225-a737-b28bc6f5801c
huntr.dev/bounties/bdf5f216-4499-4225-a737-b28bc6f5801c/
lists.debian.org/debian-lts-announce/2022/02/msg00006.html
www.debian.org/security/2022/dsa-5101
Related
huntr
huntr
in adodb/adodb
2021-10-28 16:05:21
osv
osv
libphp-adodb - security update
2022-02-06 00:00:00
Authentication Bypass in ADOdb/ADOdb
2022-01-27 15:23:19
libphp-adodb - security update
2022-03-13 00:00:00
redos
redos
ROS-20240403-06
2024-04-03 00:00:00
mageia
mageia
Updated php-adodb packages fix security vulnerability
2022-02-12 20:31:35
cve
cve
CVE-2021-3850
2022-01-25 15:15:08
nessus
nessus
Debian DLA-2912-1 : libphp-adodb - LTS security update
2022-02-06 00:00:00
Debian DSA-5101-1 : libphp-adodb - security update
2022-03-14 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0056)
2022-02-13 00:00:00
Debian: Security Advisory (DSA-5101-1)
2022-03-15 00:00:00
Debian: Security Advisory (DLA-2912-1)
2022-02-07 00:00:00
debiancve
debiancve
CVE-2021-3850
2022-01-25 15:15:08
ubuntucve
ubuntucve
CVE-2021-3850
2022-01-25 00:00:00
prion
prion
Authentication flaw
2022-01-25 15:15:00
nvd
nvd
CVE-2021-3850
2022-01-25 15:15:08
cvelist
cvelist
CVE-2021-3850 Authentication Bypass by Primary Weakness in adodb/adodb
2022-01-25 14:20:11
github
github
Authentication Bypass in ADOdb/ADOdb
2022-01-27 15:23:19
debian
debian
[SECURITY] [DLA 2912-1] libphp-adodb security update
2022-02-06 09:08:39
[SECURITY] [DSA 5101-1] libphp-adodb security update
2022-03-13 14:49:45
gitlab
gitlab
Authentication Bypass by Primary Weakness
2022-01-25 00:00:00
ubuntu
ubuntu
ADOdb vulnerabilities
2024-06-10 00:00:00