---
title: "GHSA-h63c-xvpf-264j: ADOdb SQL injection vulnerability"
url: https://erroneo.us/security/ghsa/GHSA-h63c-xvpf-264j/
description: "GHSA-h63c-xvpf-264j (critical, Composer (PHP)): ADOdb SQL injection vulnerability. The ADOdb Library for PHP prior to version 5.20.11 is prone to SQL…"
type: advisory
section: "Security Digest"
date_published: 2024-05-15
date_modified: 2024-05-15
publisher: erroneo.us
author: erroneo.us Security Desk
ghsa: "GHSA-h63c-xvpf-264j"
license: All rights reserved. Quote with attribution and a link.
---

# GHSA-h63c-xvpf-264j: ADOdb SQL injection vulnerability

## Affected packages

- Composer (PHP) `adodb/adodb-php` < 5.20.11 → fixed: 5.20.11

## Details

The ADOdb Library for PHP prior to version 5.20.11 is prone to SQL Injection vulnerability in multiple drivers.

## Sources

- [GitHub Advisory GHSA-h63c-xvpf-264j](https://github.com/advisories/GHSA-h63c-xvpf-264j)
- [github.com](https://github.com/ADOdb/ADOdb/pull/311)
- [github.com](https://github.com/ADOdb/ADOdb/pull/401)
- [github.com](https://github.com/dregad/ADOdb/commit/34788ce8c1d08500631f55764cc2247b9c7cfd2b)
- [github.com](https://github.com/dregad/ADOdb/commit/d29c23f2264ec95c6d3851e0f51ce240b2f36b74)
- [github.com](https://github.com/FriendsOfPHP/security-advisories/blob/master/adodb/adodb-php/2018-03-06.yaml)

---
Source page: https://erroneo.us/security/ghsa/GHSA-h63c-xvpf-264j/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt