{"id":"GHSA-h63c-xvpf-264j","aliases":[],"title":"ADOdb SQL injection vulnerability","description":"The ADOdb Library for PHP prior to version 5.20.11 is prone to SQL Injection vulnerability in multiple drivers.","severity":"critical","score":null,"published":"2024-05-15T17:44:48.000Z","modified":"2024-11-29T05:39:51.874Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"adodb/adodb-php","ranges":[{"events":[{"introduced":"0"},{"fixed":"5.20.11"}],"type":"ECOSYSTEM"}],"versions":["v5.19","v5.20.0","v5.20.1","v5.20.10","v5.20.2","v5.20.3","v5.20.4","v5.20.5","v5.20.6","v5.20.7","v5.20.8","v5.20.9"],"fixed":["5.20.11"]}],"references":["https://github.com/ADOdb/ADOdb/pull/311","https://github.com/ADOdb/ADOdb/pull/401","https://github.com/dregad/ADOdb/commit/34788ce8c1d08500631f55764cc2247b9c7cfd2b","https://github.com/dregad/ADOdb/commit/d29c23f2264ec95c6d3851e0f51ce240b2f36b74","https://github.com/FriendsOfPHP/security-advisories/blob/master/adodb/adodb-php/2018-03-06.yaml"],"sources":[{"name":"OSV","id":"GHSA-h63c-xvpf-264j","modified":"2024-11-29T05:39:51.874700Z","url":"https://osv.dev/vulnerability/GHSA-h63c-xvpf-264j"}],"assessments":[]}