https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 12:07:13 +0000 https://cve.radiocsirt.org/vuln/cve-2016-7405 <p>The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.</p> <p>The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.</p> https://cve.radiocsirt.org/vuln/cve-2016-7405 https://cve.radiocsirt.org/vuln/usn-6825-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libphp-adodb, Ubuntu:Pro:18.04:LTS: libphp-adodb, Ubuntu:Pro:20.04:LTS: libphp-adodb, Ubuntu:22.04:LTS: libphp-adodb</p> <p>It was discovered that the PDO driver in ADOdb was incorrectly handling string quotes. A remote attacker could possibly use this issue to perform SQL injection attacks. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7405)</p> <p>It was discovered that ADOdb was incorrectly handling GET parameters in test.php. A remote attacker could possibly use this issue to execute cross-site scripting (XSS) attacks. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-4855)</p> <p>Emmet Leahy discovered that ADOdb was incorrectly handling string quotes in PostgreSQL connections. A remote attacker could possibly use this issue to bypass authentication. (CVE-2021-3850)</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libphp-adodb, Ubuntu:Pro:18.04:LTS: libphp-adodb, Ubuntu:Pro:20.04:LTS: libphp-adodb, Ubuntu:22.04:LTS: libphp-adodb</p> <p>It was discovered that the PDO driver in ADOdb was incorrectly handling string quotes. A remote attacker could possibly use this issue to perform SQL injection attacks. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7405)</p> <p>It was discovered that ADOdb was incorrectly handling GET parameters in test.php. A remote attacker could possibly use this issue to execute cross-site scripting (XSS) attacks. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-4855)</p> <p>Emmet Leahy discovered that ADOdb was incorrectly handling string quotes in PostgreSQL connections. A remote attacker could possibly use this issue to bypass authentication. (CVE-2021-3850)</p> https://cve.radiocsirt.org/vuln/usn-6825-1