Skip to content
OpenAdvisories
Critical USN-7530-2 1 CVE

libphp-adodb vulnerability

Published Nov 4, 2026 · Updated Nov 5, 2026

Ecosystem: Ubuntu

Summary

USN-7530-1 fixed a vulnerability in ADOdb. This update provides the
corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS.

Original advisory details:

It was discovered that ADOdb incorrectly handled SQL input. A remote
attacker could use this issue to execute arbitrary SQL commands.

Fixed packages 5

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS libphp-adodb 5.20.3-1ubuntu1+esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS libphp-adodb 5.20.9-1ubuntu0.1~esm2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS libphp-adodb 5.20.16-1ubuntu0.1~esm2
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS libphp-adodb 5.20.19-1ubuntu0.1+esm1
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS libphp-adodb 5.21.4-1ubuntu0.1~esm1

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-46337

    SQL injection in ADOdb PostgreSQL driver pg_insert_id() method

    ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb…

    ADOdb ADOdb libphp-adodb libphp-adodb Debian Ubuntu Packagist

References

  • report
    https://ubuntu.com/security/CVE-2025-46337