Lucene search
Gentoo FoundationGLSA-201804-10HistoryApr 09, 2018 - 12:00 a.m.
Zend Framework: Multiple vulnerabilities
2018-04-0900:00:00
Gentoo Foundation
security.gentoo.org
36
0.964 High
EPSS
Percentile
99.6%
Background
Zend Framework is a high quality and open source framework for developing Web Applications.
Description
Multiple vulnerabilities have been discovered in Zend Framework that have remain unaddressed. Please review the referenced CVE identifiers for details.
Impact
Remote attackers could execute arbitrary commands or conduct SQL injection attacks.
Workaround
There is no known workaround at this time.
Resolution
Gentoo has discontinued support for Zend Framework and recommends that users unmerge the package:
# emerge --unmerge "dev-php/ZendFramework"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | dev-php/zendframework | <= 1.12.9 | UNKNOWN |
Related
nessus
nessus
GLSA-201804-10 : Zend Framework: Multiple vulnerabilities
2018-04-10 00:00:00
Fedora 23 : php-ZendFramework (2016-77e5105570)
2016-10-10 00:00:00
Fedora 24 : php-ZendFramework (2016-7f193a0c59)
2016-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: php-ZendFramework-1.12.20-1.fc25
2016-10-09 03:26:26
[SECURITY] Fedora 23 Update: php-ZendFramework-1.12.20-1.fc23
2016-10-09 09:29:08
[SECURITY] Fedora 24 Update: php-ZendFramework-1.12.20-1.fc24
2016-10-09 06:28:49
openvas
openvas
Fedora Update for php-ZendFramework FEDORA-2016-7f193a0c59
2016-11-14 00:00:00
Fedora Update for php-ZendFramework FEDORA-2016-666d95d1d5
2016-12-07 00:00:00
Fedora Update for php-ZendFramework FEDORA-2016-77e5105570
2016-11-14 00:00:00
amazon
amazon
Medium: php-ZendFramework
2016-11-18 12:30:00
prion
prion
Command injection
2016-12-30 19:59:00
Sql injection
2017-02-17 02:59:00
Sql injection
2017-02-17 02:59:00
veracode
veracode
Remote Code Execution (RCE)
2017-08-23 08:09:52
SQL Injection
2017-07-25 22:08:22
zdt
zdt
Zend Framework / zend-mail 2.4.11 - Remote Code Execution Exploit
2016-12-31 00:00:00
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit
2017-06-22 00:00:00
osv
osv
zend-mail remote code execution via Sendmail adapter
2022-05-14 02:19:49
CVE-2016-10034
2016-12-30 19:59:00
Zend Framework Allows SQL Injection
2022-05-14 02:19:45
ubuntucve
ubuntucve
github
github
zend-mail remote code execution via Sendmail adapter
2022-05-14 02:19:49
Zend Framework Allows SQL Injection
2022-05-14 02:19:45
Zend Framework Allows SQL Injection
2022-05-14 02:19:45
cve
cve
hackerone
hackerone
mageia
mageia
Updated php-ZendFramework2 packages fix security vulnerability
2017-01-13 13:32:16
Updated php-ZendFramework packages fix security vulnerability
2016-08-03 13:57:01
Updated php-ZendFramework packages fix security vulnerability
2016-10-21 17:48:32
f5
f5
K79502122 : Zend Framework vulnerability CVE-2016-10034
2017-01-16 00:00:00
SOL10280318 - Zend Framework vulnerability CVE-2016-6233
2016-09-20 00:00:00
K10280318 : Zend Framework vulnerability CVE-2016-6233
2016-09-20 00:00:00
exploitpack
exploitpack
Zend Framework zend-mail 2.4.11 - Remote Code Execution
2016-12-30 00:00:00
PHPMailer 5.2.20 with Exim MTA - Remote Code Execution
2017-06-21 00:00:00
cvelist
cvelist
friendsofphp
friendsofphp
Potential SQL injection in ORDER and GROUP statements of Zend_Db_Select
2016-07-06 17:01:58
debian
debian
[SECURITY] [DLA 1403-1] zendframework security update
2018-06-28 20:10:30
[SECURITY] [DLA 646-1] zendframework security update
2016-10-05 20:45:21
jvn
jvn
JVN#18926672: Zend Framework vulnerable to SQL injection
2016-09-15 00:00:00
exploitdb
exploitdb
Zend Framework / zend-mail < 2.4.11 - Remote Code Execution
2016-12-30 00:00:00
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution
2017-06-21 00:00:00
packetstorm
packetstorm
PHPMailer / Zend-mail / SwiftMailer Remote Code Execution
2017-01-03 00:00:00
threatpost
threatpost
myhack58
myhack58
thn
thn
Critical Updates — RCE Flaws Found in SwiftMailer, PhpMailer and ZendMail
2017-01-02 23:45:00