GHSA-h63c-xvpf-264j

Source

https://github.com/advisories/GHSA-h63c-xvpf-264j

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-h63c-xvpf-264j/GHSA-h63c-xvpf-264j.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-h63c-xvpf-264j

Published

2024-05-15T17:44:48Z

Modified

2024-11-29T05:39:51Z

Summary

ADOdb SQL injection vulnerability

Details

The ADOdb Library for PHP prior to version 5.20.11 is prone to SQL Injection vulnerability in multiple drivers.

Database specific

{
    "cwe_ids": [
        "CWE-89"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-05-15T17:44:48Z",
    "nvd_published_at": null,
    "severity": "CRITICAL"
}

References

Affected packages

Packagist / adodb/adodb-php

Package

Name: adodb/adodb-php
Purl: pkg:composer/adodb/adodb-php

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.20.11

Affected versions

v5.*

v5.19

v5.20.0

v5.20.1

v5.20.2

v5.20.3

v5.20.4

v5.20.5

v5.20.6

v5.20.7

v5.20.8

v5.20.9

v5.20.10

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-h63c-xvpf-264j/GHSA-h63c-xvpf-264j.json"