495 matches found
[SECURITY] Fedora 23 Update: php-ZendFramework2-2.4.10-1.fc23
Zend Framework 2 is an open source framework for developing web applications and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code and utilizes most of the new features of PHP 5.3, namely namespaces, late static binding, lambda functions and closures. Zend Framework 2 evolv...
[SECURITY] Fedora 22 Update: php-ZendFramework2-2.4.10-1.fc22
Zend Framework 2 is an open source framework for developing web applications and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code and utilizes most of the new features of PHP 5.3, namely namespaces, late static binding, lambda functions and closures. Zend Framework 2 evolv...
Zend Framework PDO Adapter Arbitrary Command Execution Vulnerability
Zend Framework ZF is an open source PHP5 development framework for developing web applications and services. In versions prior to Zend Framework 1.12.16, the PDO adapter does not filter null characters within SQL statements, which allows remote attackers to execute arbitrary SQL commands via a...
CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
Sql injection
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
UBUNTU-CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
CVE-2015-7695
CVE-2015-7695 affects Zend Framework’s PDO adapters in versions before 1.12.16. The issue is that null bytes are not filtered in SQL statements, allowing remote attackers to execute arbitrary SQL via a crafted query. Impact is remote, with network access and high severity in typical assessments. ...
Zend Framework < 2.3.6 CSRF/XSRF
Binary data 9139.prm...
Zend Framework < 2.3.8 / 2.4.x < 2.4.1 HTTP Response Splitting
Binary data 9138.prm...
Zend Framework < 2.0.8 / 2.1.x < 2.1.4 Multiple Vulnerabilities
Binary data 9146.prm...
Zend Framework < 2.0.1 Multiple XSS
Binary data 9147.prm...
Zend Framework < 1.12.16 SQL Injection
Binary data 9148.prm...
Zend Framework < 2.2.10 / 2.3.x < 2.3.5 SQL Injection
Binary data 9140.prm...
Zend Framework < 2.2.5 Trusted Proxy Bypass
Binary data 9145.prm...
Zend Framework < 1.12.4 Multiple Vulnerabilities
Binary data 9150.prm...
Zend Framework < 2.2.9 / 2.3.x < 2.3.4 Session Validators Security Bypass
Binary data 9141.prm...