GHSA-3fj4-q72x-x2g9
Suggest an improvement- Source
- https://github.com/advisories/GHSA-3fj4-q72x-x2g9
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-3fj4-q72x-x2g9/GHSA-3fj4-q72x-x2g9.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-3fj4-q72x-x2g9
- Aliases
- Published
- 2022-05-17T02:37:05Z
- Modified
- 2024-02-21T05:32:01.394052Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- ADOdb Library SQL Injection
- Details
-
The
qstrmethod in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting. - Database specific
{ "nvd_published_at": "2016-10-03T18:59:00Z", "cwe_ids": [ "CWE-89" ], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2023-07-31T19:43:14Z" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2016-7405
- https://github.com/ADOdb/ADOdb/issues/226
- https://github.com/ADOdb/ADOdb/commit/bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8
- https://github.com/ADOdb/ADOdb/blob/v5.20.7/docs/changelog.md
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LT3WU77BRUJREZUYQ3ZQBMUIVIVIND4Y
- https://security.gentoo.org/glsa/201701-59
- https://web.archive.org/web/20210123170727/http://www.securityfocus.com/bid/92969
- http://www.openwall.com/lists/oss-security/2016/09/07/8
- http://www.openwall.com/lists/oss-security/2016/09/15/1
Affected packages
Packagist / adodb/adodb-php
Package
- Name
- adodb/adodb-php
- Purl
- pkg:composer/adodb/adodb-php