Adodb
Vendor:
First CVE: Dec 31, 2004 · Active for 21 years
7
Total CVEs
More Total CVEs than 83% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
5.6
Avg CVSS
Higher Avg CVSS than 16% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Adodb over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 31, 2004
21 years ago
Most Recent CVE
Sep 23, 2011
5,419 days ago
CVE Severity & Scoring
Adodb7 CVEs
71%
29%
All CVEs352,708 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown7 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown7 (100.0%)
User Interaction
None0 (0.0%)
Unknown7 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown7 (100.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-0147HIGH Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) | Jan 9, 2006 | 7.5 | 36 | NO | YES |
CVE-2006-0146HIGH The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MA | Jan 9, 2006 | 7.5 | 34 | NO | YES |
CVE-2006-0806MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1 | Feb 21, 2006 | 4.3 | 23 | NO | YES |
CVE-2006-0410MEDIUM SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary s | Jan 25, 2006 | 5.0 | 16 | NO | NO |
CVE-2011-3699MEDIUM John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error mes | Sep 23, 2011 | 5.0 | 15 | NO | NO |
CVE-2006-4618MEDIUM PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-link 2.3.4, allows remote attackers to exec | Sep 7, 2006 | 5.1 | 15 | NO | NO |
CVE-2004-2664MEDIUM John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODB | Dec 31, 2004 | 5.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
42.9% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Adodb
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.11 | 1 | 5.0 | 1.4% | 0 | 0 |
| 4.71 | 1 | 4.3 | 5.9% | 0 | 1 |
| 4.70 | 2 | 4.7 | 4.4% | 0 | 1 |
| 4.68 | 4 | 6.1 | 8.8% | 0 | 3 |
| 4.66 | 4 | 6.1 | 8.8% | 0 | 3 |
| 4.21 | 1 | 5.0 | 1.2% | 0 | 0 |
| 4.20 | 1 | 5.0 | 1.2% | 0 | 0 |
| 4.11 | 1 | 5.0 | 1.2% | 0 | 0 |
| 4.10 | 1 | 5.0 | 1.2% | 0 | 0 |
| 4.05 | 1 | 5.0 | 1.2% | 0 | 0 |
| 4.04 | 1 | 5.0 | 1.2% | 0 | 0 |
| 4.03 | 1 | 5.0 | 1.2% | 0 | 0 |
| 4.02 | 1 | 5.0 | 1.2% | 0 | 0 |
| 4.01 | 1 | 5.0 | 1.2% | 0 | 0 |
| 4.00 | 1 | 5.0 | 1.2% | 0 | 0 |
| 3.94 | 1 | 5.0 | 1.2% | 0 | 0 |