John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODB_DIR, which reveals the installation path in an error message.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Adodb | John_lim | * | 4.22 (including) |
| Adodb | John_lim | 3.94 (including) | 3.94 (including) |
| Adodb | John_lim | 4.00 (including) | 4.00 (including) |
| Adodb | John_lim | 4.01 (including) | 4.01 (including) |
| Adodb | John_lim | 4.02 (including) | 4.02 (including) |
| Adodb | John_lim | 4.03 (including) | 4.03 (including) |
| Adodb | John_lim | 4.04 (including) | 4.04 (including) |
| Adodb | John_lim | 4.05 (including) | 4.05 (including) |
| Adodb | John_lim | 4.10 (including) | 4.10 (including) |
| Adodb | John_lim | 4.11 (including) | 4.11 (including) |
| Adodb | John_lim | 4.20 (including) | 4.20 (including) |
| Adodb | John_lim | 4.21 (including) | 4.21 (including) |