Medium severity6.1NVD Advisory· Published May 12, 2017· Updated Jun 17, 2026

CVE-2016-4855

Description

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
adodb/adodb-phpPackagist	< 5.20.6	5.20.6

Affected products

Adodb/Adodb2 versions
cpe:2.3:a:adodb_project:adodb:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:adodb_project:adodb:*:*:*:*:*:*:*:*range: <=5.20.5
- (no CPE)range: versions prior to 5.20.6
ghsa-coords
pkg:composer/adodb/adodb-php
Range: < 5.20.6

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN48237713/index.htmlnvdThird Party AdvisoryVDB EntryWEB
www.securityfocus.com/bid/92753nvdThird Party AdvisoryVDB EntryWEB
github.com/ADOdb/ADOdb/issues/274nvdThird Party AdvisoryWEB
github.com/advisories/GHSA-hhfw-xxhm-pf32ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2016-4855ghsaADVISORY
github.com/ADOdb/ADOdb/commit/ecb93d8c1fd3bbde62aca9c3a13c32f077da2da8ghsaWEB
github.com/FriendsOfPHP/security-advisories/blob/master/adodb/adodb-php/CVE-2016-4855.yamlghsaWEB
security.gentoo.org/glsa/201701-59nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000