Critical DLA-620-1 2 CVEs

libphp-adodb - security update

Published Sep 13, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	libphp-adodb	5.15-1+deb7u1

Vulnerabilities 2

Critical 9.8

CVE-2016-7405

ADOdb Library SQL Injection

The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.

libphp-adodb adodb/adodb-php libphp-adodb Debian Ubuntu Packagist

Oct 3, 2016
Medium 6.1

CVE-2016-4855

ADOdb Cross-site scripting vulnerability in old test script

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

ADOdb ADOdb libphp-adodb libphp-adodb Debian Ubuntu Packagist

May 12, 2017