{"id":"CVE-2016-7405","details":"The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.","aliases":["GHSA-3fj4-q72x-x2g9"],"modified":"2026-07-08T05:48:19.984187527Z","published":"2016-10-03T18:59:14.150Z","database_specific":{"unresolved_ranges":[{"vendor_product":"fedoraproject:fedora","cpes":["cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"25"},{"last_affected":"25"}],"source":"CPE_STRING"}]},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LT3WU77BRUJREZUYQ3ZQBMUIVIVIND4Y/"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/92969"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201701-59"},{"type":"FIX","url":"http://www.openwall.com/lists/oss-security/2016/09/07/8"},{"type":"FIX","url":"http://www.openwall.com/lists/oss-security/2016/09/15/1"},{"type":"FIX","url":"https://github.com/ADOdb/ADOdb/blob/v5.20.7/docs/changelog.md"},{"type":"FIX","url":"https://github.com/ADOdb/ADOdb/commit/bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8"},{"type":"FIX","url":"https://github.com/ADOdb/ADOdb/issues/226"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/adodb/adodb","events":[{"introduced":"424f3989d84a3c4bb6695d983dc25f14191897b7"},{"last_affected":"66b60ff95a969d7d79d385a25779e7d375a8040d"},{"fixed":"bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8"}],"database_specific":{"cpe":["cpe:2.3:a:adodb_project:adodb:5.00:beta:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.01:beta:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.02:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.02:a:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.03:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.04:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.04:a:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.05:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.06:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.06:a:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.07:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.08:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.08:a:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.09:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.09:a:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.10:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.11:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.12:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.13:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.14:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.15:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.16:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.16:a:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.17:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.18:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.18:a:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.19:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.20.0:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.20.1:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.20.2:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.20.3:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.20.4:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.20.5:*:*:*:*:*:*:*","cpe:2.3:a:adodb_project:adodb:5.20.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.00-beta"},{"last_affected":"5.00-beta"},{"introduced":"5.01-beta"},{"last_affected":"5.01-beta"},{"introduced":"5.02"},{"last_affected":"5.02"},{"introduced":"5.02-a"},{"last_affected":"5.02-a"},{"introduced":"5.03"},{"last_affected":"5.03"},{"introduced":"5.04"},{"last_affected":"5.04"},{"introduced":"5.04-a"},{"last_affected":"5.04-a"},{"introduced":"5.05"},{"last_affected":"5.05"},{"introduced":"5.06"},{"last_affected":"5.06"},{"introduced":"5.06-a"},{"last_affected":"5.06-a"},{"introduced":"5.07"},{"last_affected":"5.07"},{"introduced":"5.08"},{"last_affected":"5.08"},{"introduced":"5.08-a"},{"last_affected":"5.08-a"},{"introduced":"5.09"},{"last_affected":"5.09"},{"introduced":"5.09-a"},{"last_affected":"5.09-a"},{"introduced":"5.10"},{"last_affected":"5.10"},{"introduced":"5.11"},{"last_affected":"5.11"},{"introduced":"5.12"},{"last_affected":"5.12"},{"introduced":"5.13"},{"last_affected":"5.13"},{"introduced":"5.14"},{"last_affected":"5.14"},{"introduced":"5.15"},{"last_affected":"5.15"},{"introduced":"5.16"},{"last_affected":"5.16"},{"introduced":"5.16-a"},{"last_affected":"5.16-a"},{"introduced":"5.17"},{"last_affected":"5.17"},{"introduced":"5.18"},{"last_affected":"5.18"},{"introduced":"5.18-a"},{"last_affected":"5.18-a"},{"introduced":"5.19"},{"last_affected":"5.19"},{"introduced":"5.20.0"},{"last_affected":"5.20.0"},{"introduced":"5.20.1"},{"last_affected":"5.20.1"},{"introduced":"5.20.2"},{"last_affected":"5.20.2"},{"introduced":"5.20.3"},{"last_affected":"5.20.3"},{"introduced":"5.20.4"},{"last_affected":"5.20.4"},{"introduced":"5.20.5"},{"last_affected":"5.20.5"},{"introduced":"5.20.6"},{"last_affected":"5.20.6"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["5.00-beta","5.01-beta","5.02","5.03","5.04","5.05","5.06","5.07","5.08","5.09","5.10","5.11","5.12","5.13","5.14","5.15","5.16","5.17","5.18","5.19","5.20.0","5.20.1","5.20.2","5.20.3","5.20.4","5.20.5","5.20.6","v5.20.6","v5.20.5","v5.20.4","v5.20.3","v5.20.2","v5.20.1","v5.20.0","v5.19","v5.18a","v5.18","v5.17","v5.16a","v5.16","v5.15","v5.14","v5.13","v5.12","v5.11","v5.10","v5.09a","v5.09","v5.08a","v5.08","v5.07","v5.06","v5.05","v5.04","v5.03","v5.02a","v5.02","v5.01beta","v5.00beta"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7405.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}