https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:05:56.815946+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-7405 CVE-2016-7405 2026-10-09T12:05:56.878321+00:00

The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.

 https://cve.radiocsirt.org/vuln/usn-6825-1 USN-6825-1 — libphp-adodb vulnerabilities 2026-10-09T12:05:56.878395+00:00

Affected: Ubuntu:Pro:16.04:LTS: libphp-adodb, Ubuntu:Pro:18.04:LTS: libphp-adodb, Ubuntu:Pro:20.04:LTS: libphp-adodb, Ubuntu:22.04:LTS: libphp-adodb

It was discovered that the PDO driver in ADOdb was incorrectly handling string quotes. A remote attacker could possibly use this issue to perform SQL injection attacks. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7405)

It was discovered that ADOdb was incorrectly handling GET parameters in test.php. A remote attacker could possibly use this issue to execute cross-site scripting (XSS) attacks. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-4855)

Emmet Leahy discovered that ADOdb was incorrectly handling string quotes in PostgreSQL connections. A remote attacker could possibly use this issue to bypass authentication. (CVE-2021-3850)