Skip to content
OpenAdvisories
Critical USN-7530-1 1 CVE

libphp-adodb vulnerability

Published May 29, 2025 · Updated Feb 4, 2026

Ecosystem: Ubuntu

Summary

It was discovered that ADOdb incorrectly handled SQL input. A remote
attacker could use this issue to execute arbitrary SQL commands.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.04 libphp-adodb 5.22.8-0.1ubuntu0.1

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-46337

    SQL injection in ADOdb PostgreSQL driver pg_insert_id() method

    ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb…

    ADOdb ADOdb libphp-adodb libphp-adodb Debian Ubuntu Packagist

References

  • report
    https://ubuntu.com/security/CVE-2025-46337