CVE-2006-0147: john_lim adodb
Vulnerability summary
CVE-2006-0147 is a high (CVSS 7.5) vulnerability in john_lim adodb. EPSS estimates a 13.06% chance of exploitation in the next 30 days, higher than 96.3% of scored vulnerabilities. 5 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 09-01-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
13.06%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 13.06% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
5 foundExploit Reference (secunia.com)
Maturity: unknown
Exploit Reference (secunia.com)
Maturity: unknown
Exploit Reference (retrogod.altervista.org)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian2 products
- cacti< 0.8.6d-1
- libphp-adodb< 4.72-0.1
John_lim1 product
- adodb4.66 | 4.68
Mantis1 product
- mantis0.19.4 | 1.0.0_rc4
Moodle1 product
- moodle1.5.3
Postnuke_software_foundation1 product
- postnuke0.761
The_cacti_group1 product
- cacti0.8.6g
6 vendors · 7 products
