Login Request a demo
Unscored severity · published Jan 25, 2006
CVE-2006-0410
SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary…
–
CVSS
2.9%
EPSS
No
On KEV
Description
SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Adodb · John Lim
4.66; 4.68; 4.70 · source: NVD
Affected product
AD
Adodb
John Lim
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0410
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0410
Patch
http://secunia.com/advisories/18575
secunia.com
http://secunia.com/advisories/18732
secunia.com
http://secunia.com/advisories/18745
secunia.com
http://secunia.com/advisories/19555
secunia.com
http://secunia.com/advisories/19590
secunia.com
http://secunia.com/advisories/19591
More from Adodb
–
CVE-2011-3699
John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error…
–
CVE-2006-4618
PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-link 2.3.4, allows remote attackers to…
–
CVE-2006-0806
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via…
–
CVE-2006-0147
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle,…
–
CVE-2006-0146
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7)…