Lucene search

K
osvGoogleOSV:GHSA-XFJQ-W3CW-H5FQ
HistoryMay 14, 2022 - 2:19 a.m.

Zend Framework Allows SQL Injection

2022-05-1402:19:45
Google
osv.dev
10

7.8 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.7%

The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.

7.8 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.7%