CVE-2025-46337

Publication date 1 May 2025

Last updated 10 October 2025

Ubuntu priority

Cvss 3 Severity Score

Description

ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libphp-adodb	26.04 LTS resolute	Fixed 5.22.9-0.1
	25.10 questing	Fixed 5.22.9-0.1
	25.04 plucky	Fixed 5.22.8-0.1ubuntu0.1
	24.10 oracular	Fixed 5.22.7-0.1ubuntu0.1
	24.04 LTS noble	Needs evaluation
	22.04 LTS jammy	Needs evaluation
	20.04 LTS focal	Ignored end of standard support, was needs-triage
	18.04 LTS bionic	Needs evaluation
	16.04 LTS xenial	Needs evaluation

Severity score breakdown

Parameter	Value
Base score	10.0 · Critical
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Changed
Confidentiality	High
Integrity impact	High
Availability impact	Low
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

References

Related Ubuntu Security Notices (USN)

USN-7530-1
ADOdb vulnerability
29 May 2025