CVE-2006-0147

Publication date 9 January 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
libphp-adodb 7.10 gutsy
Fixed 4.72-0.1ubuntu1
7.04 feisty
Fixed 4.72-0.1ubuntu1
6.10 edgy
Fixed 4.72-0.1ubuntu1
6.06 LTS dapper
Fixed 4.72-0.1ubuntu1