EUVD-2022-5285

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Zend Framework versions prior to 2.2.10 and 2.3.5 has SQL injection vulnerability in PostgreSQL adapter.

Reporter	Title	Published	Views	Family All 12
Tenable Nessus	Zend Framework < 2.2.10 / 2.3.x < 2.3.5 SQL Injection	15 Mar 201600:00	–	nessus
Circl	CVE-2015-0270	25 Oct 201918:32	–	circl
CVE	CVE-2015-0270	25 Oct 201913:33	–	cve
Cvelist	CVE-2015-0270	25 Oct 201913:33	–	cvelist
Friends Of PHP	Potential SQL injection in PostgreSQL Zend\Db adapter	18 Feb 201519:15	–	friendsofphp
Friends Of PHP	Potential SQL injection in PostgreSQL Zend\Db adapter	18 Feb 201519:15	–	friendsofphp
Github Security Blog	Zend Framework Allows SQL Injection	24 May 202216:59	–	github
NVD	CVE-2015-0270	25 Oct 201915:15	–	nvd
OSV	GHSA-V59P-P692-V382 Zend Framework Allows SQL Injection	24 May 202216:59	–	osv
Prion	Sql injection	25 Oct 201915:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "e13f5f6c-7d84-37cd-be5e-8c7cd37cd1e7",
        "vendor": {
          "name": "Zend"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "67c79fb2-4c75-33ff-bf3d-980017e37ba2",
        "product": {
          "name": "Zend Framework"
        },
        "product_version": "before 2.2.10 and 2.3.x before 2.3.5"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-0270
github	www.github.com/zendframework/zendframework/commit/569f18228f5fc84534af6ff2f367ca1a7143ec65
framework	www.framework.zend.com/security/advisory/ZF2015-02
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-db/CVE-2015-0270.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/CVE-2015-0270.yaml
github	www.github.com/zendframework/zendframework

03 Oct 2025 20:07Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

CVSS 27.5

EPSS0.01103