Critical
Security advisory
The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2016-7405
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 09:43 UTC · Revision 1
Source evidence
The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.
osv:CVE-2016-7405
Complete source record
{
"id": "76df51294fa6d9cac94e7ba08904d721df098cf3879ae998f6560ec7af4d1cc4",
"url": "https://osv.dev/vulnerability/CVE-2016-7405",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2016-7405",
"summary": "The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.",
"evidence": "osv:CVE-2016-7405",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2016-7405",
"aliases": [
"CVE-2016-7405",
"GHSA-3fj4-q72x-x2g9"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/adodb/adodb",
"type": "GIT",
"events": [
{
"introduced": "424f3989d84a3c4bb6695d983dc25f14191897b7"
},
{
"last_affected": "66b60ff95a969d7d79d385a25779e7d375a8040d"
},
{
"fixed": "bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.00:beta:*:*:*:*:*:*",
"range": [
{
"introduced": "5.00-beta"
},
{
"last_affected": "5.00-beta"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.01:beta:*:*:*:*:*:*",
"range": [
{
"introduced": "5.01-beta"
},
{
"last_affected": "5.01-beta"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.02:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.02"
},
{
"last_affected": "5.02"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.02:a:*:*:*:*:*:*",
"range": [
{
"introduced": "5.02-a"
},
{
"last_affected": "5.02-a"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.03:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.03"
},
{
"last_affected": "5.03"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.04:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.04"
},
{
"last_affected": "5.04"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.04:a:*:*:*:*:*:*",
"range": [
{
"introduced": "5.04-a"
},
{
"last_affected": "5.04-a"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.05:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.05"
},
{
"last_affected": "5.05"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.06:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.06"
},
{
"last_affected": "5.06"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.06:a:*:*:*:*:*:*",
"range": [
{
"introduced": "5.06-a"
},
{
"last_affected": "5.06-a"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.07:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.07"
},
{
"last_affected": "5.07"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.08:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.08"
},
{
"last_affected": "5.08"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.08:a:*:*:*:*:*:*",
"range": [
{
"introduced": "5.08-a"
},
{
"last_affected": "5.08-a"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.09:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.09"
},
{
"last_affected": "5.09"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.09:a:*:*:*:*:*:*",
"range": [
{
"introduced": "5.09-a"
},
{
"last_affected": "5.09-a"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.10:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.10"
},
{
"last_affected": "5.10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.11"
},
{
"last_affected": "5.11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.12:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.12"
},
{
"last_affected": "5.12"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.13:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.13"
},
{
"last_affected": "5.13"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.14:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.14"
},
{
"last_affected": "5.14"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.15:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.15"
},
{
"last_affected": "5.15"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.16:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.16"
},
{
"last_affected": "5.16"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.16:a:*:*:*:*:*:*",
"range": [
{
"introduced": "5.16-a"
},
{
"last_affected": "5.16-a"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.17:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.17"
},
{
"last_affected": "5.17"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.18:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.18"
},
{
"last_affected": "5.18"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.18:a:*:*:*:*:*:*",
"range": [
{
"introduced": "5.18-a"
},
{
"last_affected": "5.18-a"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.19:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.19"
},
{
"last_affected": "5.19"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.20.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.20.0"
},
{
"last_affected": "5.20.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.20.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.20.1"
},
{
"last_affected": "5.20.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.20.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.20.2"
},
{
"last_affected": "5.20.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.20.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.20.3"
},
{
"last_affected": "5.20.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.20.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.20.4"
},
{
"last_affected": "5.20.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.20.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.20.5"
},
{
"last_affected": "5.20.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:adodb_project:adodb:5.20.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.20.6"
},
{
"last_affected": "5.20.6"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"5.00-beta",
"5.01-beta",
"5.02",
"5.03",
"5.04",
"5.05",
"5.06",
"5.07",
"5.08",
"5.09",
"5.10",
"5.11",
"5.12",
"5.13",
"5.14",
"5.15",
"5.16",
"5.17",
"5.18",
"5.19",
"5.20.0",
"5.20.1",
"5.20.2",
"5.20.3",
"5.20.4",
"5.20.5",
"5.20.6",
"v5.20.6",
"v5.20.5",
"v5.20.4",
"v5.20.3",
"v5.20.2",
"v5.20.1",
"v5.20.0",
"v5.19",
"v5.18a",
"v5.18",
"v5.17",
"v5.16a",
"v5.16",
"v5.15",
"v5.14",
"v5.13",
"v5.12",
"v5.11",
"v5.10",
"v5.09a",
"v5.09",
"v5.08a",
"v5.08",
"v5.07",
"v5.06",
"v5.05",
"v5.04",
"v5.03",
"v5.02a",
"v5.02",
"v5.01beta",
"v5.00beta"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7405.json"
}
}
],
"modified": "2026-10-20T10:47:39.959969547Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LT3WU77BRUJREZUYQ3ZQBMUIVIVIND4Y/",
"https://security.gentoo.org/glsa/201701-59",
"https://github.com/ADOdb/ADOdb/blob/v5.20.7/docs/changelog.md",
"https://github.com/ADOdb/ADOdb/commit/bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8",
"https://github.com/ADOdb/ADOdb/issues/226"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "25"
},
{
"last_affected": "25"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2016-7405",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 379613,
"published_at": "2016-10-03T18:59:14.15+00:00"
}