Lucene search
MitreCVELIST:CVE-2012-6531HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-6531
2022-10-0316:15:27
mitre
www.cve.org
1
zend framework
xxe injection
remote attackers
simplexmlelement
cve-2012-6531
doctype
xml-rpc
(1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack, a different vulnerability than CVE-2012-3363.
References
Related
ubuntucve
ubuntucve
CVE-2012-6531
2013-02-13 00:00:00
CVE-2012-3363
2013-02-13 00:00:00
nvd
nvd
CVE-2012-6531
2013-02-13 17:55:01
CVE-2012-3363
2013-02-13 17:55:01
cve
cve
CVE-2012-6531
2022-10-03 16:15:27
CVE-2012-3363
2013-02-13 17:55:01
osv
osv
Zend Framework XEE Vulnerability
2022-05-17 05:14:21
Zend Framework XXE Vulnerability
2022-05-17 04:56:50
zendframework - regression update
2015-06-23 00:00:00
github
github
Zend Framework XEE Vulnerability
2022-05-17 05:14:21
Zend Framework XXE Vulnerability
2022-05-17 04:56:50
nessus
nessus
Fedora 16 : php-ZendFramework-1.11.12-1.fc16 (2012-9978)
2012-07-16 00:00:00
Fedora 17 : php-ZendFramework-1.11.12-1.fc17 (2012-9979)
2012-07-16 00:00:00
Debian DSA-2505-1 : zendframework - information disclosure
2012-07-03 00:00:00
openvas
openvas
Fedora Update for php-ZendFramework FEDORA-2012-9978
2012-07-16 00:00:00
Fedora Update for php-ZendFramework FEDORA-2012-9979
2012-08-30 00:00:00
Debian: Security Advisory (DSA-2505-1)
2012-08-10 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: php-ZendFramework-1.11.12-1.fc16
2012-07-14 21:56:10
[SECURITY] Fedora 17 Update: php-ZendFramework-1.11.12-1.fc17
2012-07-14 21:59:54
[SECURITY] Fedora 17 Update: moodle-2.2.9-1.fc17
2013-04-03 04:26:27
cvelist
cvelist
CVE-2012-3363
2013-02-13 17:00:00
debian
debian
[SECURITY] [DSA 2505-1] zendframework security update
2012-06-29 19:42:45
[SECURITY] [DLA 251-2] zendframework regression update
2015-06-23 20:26:59
[SECURITY] [DLA 251-1] zendframework security update
2015-06-20 18:40:57
checkpoint_advisories
checkpoint_advisories
freebsd
freebsd
Zend Framework -- Multiple vulnerabilities via XXE injection
2012-06-26 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_ZEND_XMLRPC
2013-02-13 17:55:00