CVE catalog

CVE-2004-2664

libphp-adodb: CVE-2004-2664

Severity: Low
Published: Dec 31, 2004, 5:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 1.20% · Oct 25, 2026

John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODB_DIR, which reveals the installation path in an error message.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libphp-adodb	sid	`5.22.12-1`	not affected
Debian	libphp-adodb	forky	`5.22.12-1`	not affected
Debian	libphp-adodb	trixie	`5.22.9-0.1+deb13u1`	not affected
Debian	libphp-adodb	bookworm	`5.21.4-1+deb12u2`	not affected

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libphp-adodb	source	sid	`Not affected`	unimportant	Not reported	Not reported
Debian	libphp-adodb	source	forky	`Not affected`	unimportant	Not reported	Not reported
Debian	libphp-adodb	source	trixie	`Not affected`	unimportant	Not reported	Not reported
Debian	libphp-adodb	source	bookworm	`Not affected`	unimportant	Not reported	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libphp-adodb]Not affected
Details (4)
- 5.21.4-1+deb12u2 · all · bookworm
  Not affected
  dsa · libphp-adodb · debian · bookworm
- 5.21.4-1+deb12u2 · all · bookworm
  Not affected
  dsa · libphp-adodb · debian · bookworm
- 5.22.9-0.1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · libphp-adodb · debian · bookworm
- 5.22.9-0.1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · libphp-adodb · debian · bookworm

[Debian 13 (Trixie)]

[phppgadmin]Fixed
Details (2)
- 7.14.7+dfsg-1 · all · trixie
  Fixed · Fixed: 4.0.1-2
  dsa · phppgadmin · debian · 13
- 7.14.7+dfsg-1 · all · trixie
  Fixed · Fixed: 4.0.1-2
  dsa · phppgadmin · debian · 13

Observed: Oct 23, 2026, 5:02:32 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]