https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:42:28.470039+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06864 bdu:2025-06864 2026-10-09T20:42:28.473530+00:00 bdu:2025-06864 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0519 certfr-2025-avi-0519 — De multiples vulnérabilités ont été découvertes dans Moodle. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-09T20:42:28.473562+00:00 certfr-2025-avi-0519 https://cve.radiocsirt.org/vuln/euvd-2026-241247 EUVD-2026-241247 2026-10-09T20:42:28.473580+00:00 EUVD-2026-241247 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46337 fkie_cve-2025-46337 2026-10-09T20:42:28.473592+00:00

ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9.

 https://cve.radiocsirt.org/vuln/ghsa-8x27-jwjr-8545 GHSA-8x27-jwjr-8545 — SQL injection in ADOdb PostgreSQL driver pg_insert_id() method 2026-10-09T20:42:28.473619+00:00

Affected: Packagist: adodb/adodb-php

Improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data.

Note that the indicated Severity corresponds to a worst-case usage scenario.

### Impact PostgreSQL drivers (postgres64, postgres7, postgres8, postgres9).

### Patches Vulnerability is fixed in ADOdb 5.22.9 (11107d6d6e5160b62e05dff8a3a2678cf0e3a426).

### Workarounds Only pass controlled data to pg_insert_id() method's $fieldname parameter, or escape it with pg_escape_identifier() first.

### References - Issue https://github.com/ADOdb/ADOdb/issues/1070 - [Blog post](https://xaliom.blogspot.com/2025/05/from-sast-to-cve-2025-46337.html) by Marco Nappi

### Credits Thanks to Marco Nappi (@mrcnpp) for reporting this vulnerability.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-46337 UBUNTU-CVE-2025-46337 2026-10-09T20:42:28.473649+00:00

Affected: Ubuntu:Pro:16.04:LTS: libphp-adodb, Ubuntu:Pro:20.04:LTS: libphp-adodb, Ubuntu:Pro:22.04:LTS: libphp-adodb, Ubuntu:Pro:24.04:LTS: libphp-adodb, Ubuntu:25.10: libphp-adodb, Ubuntu:26.04:LTS: libphp-adodb

ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1353 WID-SEC-W-2025-1353 — Moodle: Mehrere Schwachstellen 2026-10-09T20:42:28.473675+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen, Sicherheitsmechanismen zu umgehen und um nicht näher spezifizierte Auswirkungen zu erzielen