Security Advisories (1)
CVE-2026-5083 (2026-04-08)

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems. Note that Ado is no longer maintained, and has been removed from the CPAN index. It is still available on BackPAN.

Changes for version 0.16 - 2013-12-19

  • Implemented Ado::BuildPlugin (untested).
  • Enhanced Ado::Build documentation and added $ENV{HOME} directory detection.
  • Moved code from Build.PL to Ado::Build::create_build_script().
  • Requiring Mojolicious 4.60

Documentation

Getting started with Ado
Making Ado B<the ERP solution for the enterprise>
Ado plugins and how to write an Ado::Plugin
all resources provided by Ado.

Modules

Ado
busy or delaying activity; bustle; fuss.
Custom routines for Ado installation
Custom routines for Ado::Plugin::* installation
Ado namespace for Mojo commands!
The base class for all controllers!
Base controller class for Ado back-office applications.
The default controller for the back-office.
The controller to manage users.
The default controller for the site.
the base schema class.
base class for Ado specific plugins.
Keep routes separately.