CVE-2016-7405
- State
- Published
- Severity
- Not scored
- Published
- Oct 3, 2016
- Updated
- Aug 6, 2024
- Reserved
- Sep 9, 2016
Description
The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- FEDORA-2016-c5ec2c17e6vendor-advisory
- [oss-security] 20160907 ADOdb PDO driver: incorrect quoting may allow SQL injectionmailing-list
- 92969vdb-entry
- https://github.com/ADOdb/ADOdb/issues/226
- GLSA-201701-59vendor-advisory
- [oss-security] 20160915 Re: ADOdb PDO driver: incorrect quoting may allow SQL injectionmailing-list
- https://github.com/ADOdb/ADOdb/blob/v5.20.7/docs/changelog.md
- https://github.com/ADOdb/ADOdb/commit/bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.