CVE-2016-7405

Critical

Published: 03/10/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The qstr method in the PDO driver in the ADOdb Library for PHP before version 5.20.7 may allow remote attackers to conduct SQL injection attacks due to incorrect quoting.

Risk Assessment

SQL injection attacks can lead to unauthorized access to the database, jeopardizing the confidentiality and integrity of the organization's data.

Recommendation

It is recommended to update the ADOdb library to the latest version to mitigate this vulnerability and review the code to ensure proper data quoting.

Original NVD description (English source)

The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.