Описание
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 5.22.9-0.1 |
| esm-apps-legacy/xenial | released | 5.20.3-1ubuntu1+esm2 |
| esm-apps/bionic | released | 5.20.9-1ubuntu0.1~esm2 |
| esm-apps/focal | released | 5.20.16-1ubuntu0.1~esm2 |
| esm-apps/jammy | released | 5.20.19-1ubuntu0.1+esm1 |
| esm-apps/noble | released | 5.21.4-1ubuntu0.1~esm1 |
| esm-apps/resolute | released | 5.22.9-0.1 |
| esm-apps/xenial | released | 5.20.3-1ubuntu1+esm2 |
| focal | ignored | end of standard support, was needs-triage |
| jammy | needed |
Показывать по
Ссылки на источники
EPSS
10 Critical
CVSS3
Связанные уязвимости
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9.
ADOdb is a PHP database class library that provides abstractions for p ...
SQL injection in ADOdb PostgreSQL driver pg_insert_id() method
Уязвимость библиотеки adodb, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код
EPSS
10 Critical
CVSS3