Adodb vulnerabilities
4 vulnerabilities
Known vulnerabilities in Adodb products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Adodb3 vulnerabilities
- Adodb/Adodb1 vulnerabilities
CVE-2021-3850adodb_projectadodb+5
EPSS score2.17%
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.CVE-2016-4855adodb_projectadodb+3EPSS score1.95%
Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2025-54119adodbadodb+2EPSS score0.50%
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a sqlite3 database and calls the metaColumns(), metaForeignKeys() or metaIndexes() methods with a crafted table name. This is fixed in version 5.22.10. To workaround this issue, only pass controlled data to metaColumns(), metaForeignKeys() and metaIndexes() method's $table parameter.CVE-2025-46337adodbadodb+3EPSS score0.74%
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9.