Browse all 4 CVE security advisories affecting adodb. AI-powered Chinese analysis, POCs, and references for each vulnerability.
ADOdb is a database abstraction library for PHP applications, enabling developers to interact with multiple database systems using a consistent API. Historically, vulnerabilities in ADOdb have included remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and insecure configuration handling. The library's security posture has been impacted by issues such as SQL injection flaws through insecure dynamic query construction and insufficient output encoding. While no major public security incidents have been widely documented, the four CVEs on record highlight ongoing concerns, particularly around insufficient input sanitization and session management weaknesses in older versions.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-54119 | ADOdb's sqlite3 driver allows SQL injection — ADOdbCWE-89 | 10.0 | Critical | 2025-08-05 |
| CVE-2025-46337 | SQL injection in ADOdb PostgreSQL driver pg_insert_id() method — ADOdbCWE-89 | 10.0 | Critical | 2025-05-01 |
| CVE-2021-3850 | Authentication Bypass by Primary Weakness in adodb/adodb — adodb/adodbCWE-305 | 9.8 | - | 2022-01-25 |
| CVE-2016-4855 | ADOdb 跨站脚本漏洞 — ADOdb | 6.1 | - | 2017-05-12 |
This page lists every published CVE security advisory associated with adodb. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.