Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1oaGZ3LXh4aG0tcGYzMs4AAbaJ

ADOdb Cross-site scripting vulnerability in old test script

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Permalink: https://github.com/advisories/GHSA-hhfw-xxhm-pf32
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oaGZ3LXh4aG0tcGYzMs4AAbaJ
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 2 years ago
Updated: 3 months ago

CVSS Score: 6.1
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Identifiers: GHSA-hhfw-xxhm-pf32, CVE-2016-4855
References:

• https://nvd.nist.gov/vuln/detail/CVE-2016-4855
• https://github.com/ADOdb/ADOdb/issues/274
• https://security.gentoo.org/glsa/201701-59
• http://jvn.jp/en/jp/JVN48237713/index.html
• http://www.securityfocus.com/bid/92753
• https://github.com/ADOdb/ADOdb/commit/ecb93d8c1fd3bbde62aca9c3a13c32f077da2da8
• https://github.com/FriendsOfPHP/security-advisories/blob/master/adodb/adodb-php/CVE-2016-4855.yaml
• https://github.com/advisories/GHSA-hhfw-xxhm-pf32

Repository: https://github.com/ADOdb/ADOdb
Blast Radius: 15.2

Affected Packages