Adodb

This hub aggregates every CVE we track for Adodb, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 12 most recently published vulnerabilities affecting Adodb.

• CVE-2025-54119ADOdb's sqlite3 driver allows SQL injection10.0Aug 5, 2025
• CVE-2025-46337SQL injection in ADOdb PostgreSQL driver pg_insert_id() method10.0May 1, 2025
• CVE-2021-3850Authentication Bypass by Primary Weakness in adodb/adodb9.1Jan 25, 2022
• CVE-2016-4855Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.6.1May 12, 2017
• CVE-2016-7405The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.9.8Oct 3, 2016
• CVE-2011-3699John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstr...5.0Sep 23, 2011
• CVE-2006-4618PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-link 2.3.4, allows remote attackers to execute arbitrary PHP...5.1Sep 7, 2006
• CVE-2004-2664John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODB_DIR, which revea...5.0Sep 7, 2006
• CVE-2006-0806Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page p...4.3Feb 21, 2006
• CVE-2006-0410SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.5.0Jan 25, 2006
• CVE-2006-0147Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaray...7.5Jan 9, 2006
• CVE-2006-0146The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and ...7.5Jan 9, 2006