3 matches found
PT-2024-40028
Name of the Vulnerable Software and Affected Versions Zend Dom, Zend Feed, Zend Soap, and Zend XmlRpc affected versions not specified Description The issue concerns XML Entity Expansion XEE vectors, which can lead to Denial of Service attacks. XEE attacks happen when the XML DOCTYPE declaration...
7.5CVSS5.8AI score
SaveExploits0References4
PT-2024-40002
Name of the Vulnerable Software and Affected Versions Zend XmlRpc affected versions not specified Description The issue concerns XML eXternal Entity XXE Injection attacks. It arises from the insecure use of the SimpleXMLElement class in the SimpleXML PHP extension for parsing XML data. An attacke...
8.6CVSS5.9AI score
SaveExploits0References4
20