PT-2016-7314 · Php+3 · Adodb Library+3
Jdavidlists
·
Publicado
2016-10-03
·
Atualizado
2024-07-03
·
CVE-2016-7405
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ADODB Library for PHP versions prior to 5.20.7
Description
The issue allows remote attackers to conduct SQL injection attacks due to incorrect quoting in the
qstr method of the PDO driver. This can be exploited via vectors related to the incorrect quoting, potentially leading to unauthorized access or manipulation of database content.Recommendations
For versions prior to 5.20.7, update to version 5.20.7 or later to resolve the issue. As a temporary workaround, consider disabling the
qstr method in the PDO driver until a patch is available. Restrict access to sensitive database operations to minimize the risk of exploitation. Avoid using the qstr method for quoting strings in SQL queries until the issue is resolved.Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Adodb Library
Linuxmint
Red Os
Ubuntu