John Lim's vulnerability profile centers on the ADOdb and ADOdb Date Library, widely embedded data-abstraction and date-handling components that serve as foundational utilities across PHP and other web-application ecosystems. The recurring exposure involves classic application-layer weaknesses: SQL injection, cross-site scripting, and information disclosure that reflect the parsing and query-composition demands of database abstraction layers. Public exploit code has frequently become available for vulnerabilities affecting these libraries; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by John Lim over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-0147HIGH Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) | Jan 9, 2006 | 7.5 | 36 | NO | YES |
CVE-2006-0146HIGH The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MA | Jan 9, 2006 | 7.5 | 34 | NO | YES |
CVE-2006-0806MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1 | Feb 21, 2006 | 4.3 | 23 | NO | YES |
CVE-2006-0410MEDIUM SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary s | Jan 25, 2006 | 5.0 | 16 | NO | NO |
CVE-2011-3699MEDIUM John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error mes | Sep 23, 2011 | 5.0 | 15 | NO | NO |
CVE-2006-4976MEDIUM The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for (1) server.php, (2) adodb-errorpear.inc.php, (3) | Sep 25, 2006 | 5.0 | 15 | NO | NO |
CVE-2006-4618MEDIUM PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-link 2.3.4, allows remote attackers to exec | Sep 7, 2006 | 5.1 | 15 | NO | NO |
CVE-2004-2664MEDIUM John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODB | Dec 31, 2004 | 5.0 | 15 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by John Lim.
Media articles that mention a CVE ID that affects a product developed by John Lim — matched by CVE ID, not by vendor name.