PT-2017-5934

Name of the Vulnerable Software and Affected Versions: Zend Framework versions prior to 1.12.7 Description: The issue concerns the Zend Db Select::order function, which does not properly handle parentheses. This allows remote attackers to conduct SQL injection attacks via unspecified vectors...