{"id":"GHSA-h63c-xvpf-264j","aliases":[],"status":"published","title":"ADOdb SQL injection vulnerability","description":"The ADOdb Library for PHP prior to version 5.20.11 is prone to SQL Injection vulnerability in multiple drivers.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-89"],"published":"2024-05-15T17:44:48Z","modified":"2024-11-29T05:39:51Z","fixes":[{"ecosystem":"Packagist","package":"adodb/adodb-php","fixed_in":["5.20.11"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"adodb/adodb-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.11"}]}]},{"source":"osv","ecosystem":"Packagist","package":"adodb/adodb-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.11"}]}],"versions":["v5.19","v5.20.0","v5.20.1","v5.20.10","v5.20.2","v5.20.3","v5.20.4","v5.20.5","v5.20.6","v5.20.7","v5.20.8","v5.20.9"]}],"references":[{"url":"https://github.com/ADOdb/ADOdb/pull/311","tags":["web"]},{"url":"https://github.com/ADOdb/ADOdb/pull/401","tags":["web"]},{"url":"https://github.com/dregad/ADOdb/commit/34788ce8c1d08500631f55764cc2247b9c7cfd2b","tags":["web"]},{"url":"https://github.com/dregad/ADOdb/commit/d29c23f2264ec95c6d3851e0f51ce240b2f36b74","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/adodb/adodb-php/2018-03-06.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-h63c-xvpf-264j"}],"sources":{"ghsa":[{"id":"GHSA-h63c-xvpf-264j","title":"ADOdb SQL injection vulnerability","description":"The ADOdb Library for PHP prior to version 5.20.11 is prone to SQL Injection vulnerability in multiple drivers.","status":"published","published":"2024-05-15T17:44:48Z","modified":"2024-05-15T17:44:49Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:37:49.48194Z"}],"osv":[{"id":"GHSA-h63c-xvpf-264j","title":"ADOdb SQL injection vulnerability","description":"The ADOdb Library for PHP prior to version 5.20.11 is prone to SQL Injection vulnerability in multiple drivers.","status":"published","published":"2024-05-15T17:44:48Z","modified":"2024-11-29T05:39:51.8747Z","cwes":["CWE-89"],"updated_at":"2026-11-02T15:46:48.546324Z"}]}}