{"id":"CVE-2016-7405","details":"The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.","aliases":["GHSA-3fj4-q72x-x2g9"],"modified":"2026-10-20T10:47:39.959969547Z","published":"2016-10-03T18:59:14.150Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"25"},{"last_affected":"25"}]}],"vendor_product":"fedoraproject:fedora","cpes":["cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*"]}]},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LT3WU77BRUJREZUYQ3ZQBMUIVIVIND4Y/"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/92969"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201701-59"},{"type":"FIX","url":"http://www.openwall.com/lists/oss-security/2016/09/07/8"},{"type":"FIX","url":"http://www.openwall.com/lists/oss-security/2016/09/15/1"},{"type":"FIX","url":"https://github.com/ADOdb/ADOdb/blob/v5.20.7/docs/changelog.md"},{"type":"FIX","url":"https://github.com/ADOdb/ADOdb/commit/bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8"},{"type":"FIX","url":"https://github.com/ADOdb/ADOdb/issues/226"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/adodb/adodb","events":[{"introduced":"424f3989d84a3c4bb6695d983dc25f14191897b7"},{"last_affected":"66b60ff95a969d7d79d385a25779e7d375a8040d"},{"fixed":"bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:adodb_project:adodb:5.00:beta:*:*:*:*:*:*","range":[{"introduced":"5.00-beta"},{"last_affected":"5.00-beta"}],"source":"CPE_STRING"},{"range":[{"introduced":"5.01-beta"},{"last_affected":"5.01-beta"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.01:beta:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.02:*:*:*:*:*:*:*","range":[{"introduced":"5.02"},{"last_affected":"5.02"}],"source":"CPE_STRING"},{"range":[{"introduced":"5.02-a"},{"last_affected":"5.02-a"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.02:a:*:*:*:*:*:*"},{"range":[{"introduced":"5.03"},{"last_affected":"5.03"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.03:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.04:*:*:*:*:*:*:*","range":[{"introduced":"5.04"},{"last_affected":"5.04"}],"source":"CPE_STRING"},{"range":[{"introduced":"5.04-a"},{"last_affected":"5.04-a"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.04:a:*:*:*:*:*:*"},{"range":[{"introduced":"5.05"},{"last_affected":"5.05"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.05:*:*:*:*:*:*:*"},{"range":[{"introduced":"5.06"},{"last_affected":"5.06"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.06:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.06:a:*:*:*:*:*:*","range":[{"introduced":"5.06-a"},{"last_affected":"5.06-a"}]},{"range":[{"introduced":"5.07"},{"last_affected":"5.07"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.07:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.08:*:*:*:*:*:*:*","range":[{"introduced":"5.08"},{"last_affected":"5.08"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.08:a:*:*:*:*:*:*","range":[{"introduced":"5.08-a"},{"last_affected":"5.08-a"}]},{"range":[{"introduced":"5.09"},{"last_affected":"5.09"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.09:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.09:a:*:*:*:*:*:*","range":[{"introduced":"5.09-a"},{"last_affected":"5.09-a"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.10:*:*:*:*:*:*:*","range":[{"introduced":"5.10"},{"last_affected":"5.10"}]},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.11:*:*:*:*:*:*:*","range":[{"introduced":"5.11"},{"last_affected":"5.11"}],"source":"CPE_STRING"},{"range":[{"introduced":"5.12"},{"last_affected":"5.12"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.12:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.13:*:*:*:*:*:*:*","range":[{"introduced":"5.13"},{"last_affected":"5.13"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.14:*:*:*:*:*:*:*","range":[{"introduced":"5.14"},{"last_affected":"5.14"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.15:*:*:*:*:*:*:*","range":[{"introduced":"5.15"},{"last_affected":"5.15"}],"source":"CPE_STRING"},{"range":[{"introduced":"5.16"},{"last_affected":"5.16"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.16:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.16:a:*:*:*:*:*:*","range":[{"introduced":"5.16-a"},{"last_affected":"5.16-a"}]},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.17:*:*:*:*:*:*:*","range":[{"introduced":"5.17"},{"last_affected":"5.17"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.18:*:*:*:*:*:*:*","range":[{"introduced":"5.18"},{"last_affected":"5.18"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.18:a:*:*:*:*:*:*","range":[{"introduced":"5.18-a"},{"last_affected":"5.18-a"}]},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.19:*:*:*:*:*:*:*","range":[{"introduced":"5.19"},{"last_affected":"5.19"}],"source":"CPE_STRING"},{"range":[{"introduced":"5.20.0"},{"last_affected":"5.20.0"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.20.0:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.20.1:*:*:*:*:*:*:*","range":[{"introduced":"5.20.1"},{"last_affected":"5.20.1"}]},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.20.2:*:*:*:*:*:*:*","range":[{"introduced":"5.20.2"},{"last_affected":"5.20.2"}],"source":"CPE_STRING"},{"range":[{"introduced":"5.20.3"},{"last_affected":"5.20.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.20.3:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:adodb_project:adodb:5.20.4:*:*:*:*:*:*:*","range":[{"introduced":"5.20.4"},{"last_affected":"5.20.4"}]},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.20.5:*:*:*:*:*:*:*","range":[{"introduced":"5.20.5"},{"last_affected":"5.20.5"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:adodb_project:adodb:5.20.6:*:*:*:*:*:*:*","range":[{"introduced":"5.20.6"},{"last_affected":"5.20.6"}],"source":"CPE_STRING"},{"range":[{"fixed":"bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["5.00-beta","5.01-beta","5.02","5.03","5.04","5.05","5.06","5.07","5.08","5.09","5.10","5.11","5.12","5.13","5.14","5.15","5.16","5.17","5.18","5.19","5.20.0","5.20.1","5.20.2","5.20.3","5.20.4","5.20.5","5.20.6","v5.20.6","v5.20.5","v5.20.4","v5.20.3","v5.20.2","v5.20.1","v5.20.0","v5.19","v5.18a","v5.18","v5.17","v5.16a","v5.16","v5.15","v5.14","v5.13","v5.12","v5.11","v5.10","v5.09a","v5.09","v5.08a","v5.08","v5.07","v5.06","v5.05","v5.04","v5.03","v5.02a","v5.02","v5.01beta","v5.00beta"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7405.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}