Adodb/adodb-php
6 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Adodb/adodb-php, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Adodb/adodb-php CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 1 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 1 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 6 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical4
- Medium1
Latest CVEs
The 6 most recently published vulnerabilities affecting Adodb/adodb-php.
- CVE-2025-54119ADOdb's sqlite3 driver allows SQL injection10.0
- CVE-2025-46337SQL injection in ADOdb PostgreSQL driver pg_insert_id() method10.0
- GHSA-h63c-xvpf-264jADOdb SQL injection vulnerability—
- CVE-2021-3850Authentication Bypass by Primary Weakness in adodb/adodb9.1
- CVE-2016-4855Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.6.1
- CVE-2016-7405The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.9.8
Product grouping is registry-driven, with AI assist and human review. How it works