NVD

Id
21827  
Name
CVE-2016-7405  
Description
The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-10-03  
Modified Date
2016-10-04  
Seq
2016-7405  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
117043 21827 CVE-2016-7405 [oss-security] 20160907 ADOdb PDO driver: incorrect quoting may allow SQL injection  View
117044 21827 CVE-2016-7405 [oss-security] 20160915 Re: ADOdb PDO driver: incorrect quoting may allow SQL injection  View
117045 21827 CVE-2016-7405 92969  View
117046 21827 CVE-2016-7405 https://github.com/ADOdb/ADOdb/blob/v5.20.7/docs/changelog.md  View
117047 21827 CVE-2016-7405 https://github.com/ADOdb/ADOdb/commit/bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8  View
117048 21827 CVE-2016-7405 https://github.com/ADOdb/ADOdb/issues/226  View
117049 21827 CVE-2016-7405 FEDORA-2016-c5ec2c17e6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4313 JVNDB-2016-005086 PHP 用 ADOdb ライブラリの PDO ドライバの qstr メソッドにおける SQL インジェクション攻撃を実行される脆弱性 PHP 用 ADOdb ライブラリの PDO ドライバの qstr メソッドには、SQL インジェクション攻撃を実行される脆弱性が存在します。 CVE-2016-7405 93912 CVE-2016-7405 21827 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005086.html 2016-09-20 2016-10-06 View