GCVE - cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*

part: a version: 4.66 update: *

Vendor	John Lim (`97f2fd53-73d7-5fe7-bfcc-b72dff9c3027`)
Product	Adodb (`7cdfd620-c76b-5f9e-9b11-a26410179289`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:composer/adodb/adodb-php`	purl2cpe	2026-06-01 10:13:47.414776
`pkg:github/adodb/adodb`	purl2cpe	2026-06-01 10:13:47.414778
`pkg:sourceforge/adodb`	purl2cpe	2026-06-01 10:13:47.414780

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-0806`	vulnerable	2026-06-08 04:48:55.402266	Details available Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF. Published: 2006-02-21T02:00:00.000Z Updated: 2024-08-07T16:48:55.946Z Open on db.gcve.eu Reference links http://secunia.com/advisories/19590 http://secunia.com/advisories/19555 http://www.vupen.com/english/advisories/2006/0664 http://securityreason.com/securityalert/452 http://www.debian.org/security/2006/dsa-1029	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0410`	vulnerable	2026-06-08 04:48:53.737768	Details available SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings. Published: 2006-01-25T02:00:00.000Z Updated: 2024-08-07T16:34:14.754Z Open on db.gcve.eu Reference links http://secunia.com/advisories/19590 http://secunia.com/advisories/19555 http://www.debian.org/security/2006/dsa-1029 http://www.vupen.com/english/advisories/2006/0448 http://www.debian.org/security/2006/dsa-1030	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0147`	vulnerable	2026-06-08 04:48:46.040996	Details available Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo. Published: 2006-01-09T23:00:00.000Z Updated: 2024-08-07T16:25:33.633Z Open on db.gcve.eu Reference links http://secunia.com/advisories/19590 http://secunia.com/advisories/18267 http://secunia.com/advisories/18254 http://secunia.com/advisories/19555 http://www.debian.org/security/2006/dsa-1029	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0146`	vulnerable	2026-06-08 04:48:46.033935	Details available The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via the sql parameter. Published: 2006-01-09T23:00:00.000Z Updated: 2024-08-07T16:25:33.856Z Open on db.gcve.eu Reference links http://secunia.com/advisories/19590 http://secunia.com/advisories/18267 http://secunia.com/advisories/18254 http://secunia.com/advisories/19555 http://www.debian.org/security/2006/dsa-1029	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.