汇总 adp 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
已披露问题常与 SQL 注入、跨站脚本与命令注入 相关，可能在 软件部署与生产负载 场景中带来 数据泄露 等暴露风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2021-34078 | lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file. | [email protected] | 8.8 | 2.46% | 2022-06-02 | 2026-06-16 |
| CVE-2008-0649 | SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the link_id parameter. | [email protected] | 7.5 | 0.93% | 2008-02-07 | 2026-06-16 |
| CVE-2006-1157 | Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Subject field (possibly messaggio parameter) when posting a new message in post.php. | [email protected] | 4.3 | 1.88% | 2006-03-12 | 2026-06-16 |
| CVE-2005-4249 | ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory. | [email protected] | 5.0 | 1.79% | 2005-12-15 | 2026-06-16 |
| CVE-2005-0497 | ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment variable to the root directory. | [email protected] | 7.2 | 0.73% | 2005-05-02 | 2026-06-16 |