Zend Framework < 2.2.5 Trusted Proxy Bypass

Binary data 9145.prm...

Zend Framework < 2.3.8 / 2.4.x < 2.4.1 HTTP Response Splitting

Binary data 9138.prm...

Zend Framework Web Application Detection

Binary data 9134.prm...

Zend Framework Version Detection

Binary data 9135.prm...

Zend Framework Information Disclosure Vulnerability

Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework. An information disclosure vulnerability exists in ZF. An attacker can exploit this vulnerability by performing a man-in-the-middle attack to impersonate a trusted server and obtain or...

Zend Framework CAPTCHA Challenge Insufficient Entropy Vulnerability

Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services. An insufficient entropy vulnerability exists in ZF. An attacker can exploit this vulnerability to obtain sensitive...

Zend Framework vulnerable to SQL injection

Overview Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability CWE-89 due to the argument of the ORDER BY clause. Hiroshi Tokumaru of HASH Consulting Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

JVN#71730320: Zend Framework vulnerable to SQL injection

Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability CWE-89 due to the argument of the ORDER BY clause. Impact An attacker who can access the product may execute SQL commands. Solution Update the Software Update to the latest version...

Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word

More info at https://framework.zend.com/security/advisory/ZF2015-09...

Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKey

More info at https://framework.zend.com/security/advisory/ZF2015-10...

Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word

More info at https://framework.zend.com/security/advisory/ZF2015-09...

Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKey

More info at https://framework.zend.com/security/advisory/ZF2015-10...

TYPO3 Zend Framework Integration扩展任意文件访问漏洞

No description provided by source...

TYPO3 Zend Framework Integration Extension Arbitrary File Access Vulnerability

TYPO3 is the Swiss TYPO3 Association maintains a set of free open source content management system framework CMS/CMF.TYPO3 Zend Framework Integration is one of the integrated Zend Framework extension plug-ins . An arbitrary file access vulnerability exists in TYPO3 Zend Framework Integration...

[SECURITY] Fedora 21 Update: php-ZendFramework-1.12.16-1.fc21

Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile code base. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and...

[SECURITY] Fedora 22 Update: php-ZendFramework-1.12.16-1.fc22

Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile code base. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and...

[SECURITY] Fedora 23 Update: php-ZendFramework-1.12.16-1.fc23

Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile code base. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and...

Multiple Zend Products Local Lift Vulnerability

Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework . zend-cache is one of the caching component . zf-apigility-doctrine is one of the services provided with Apigility a PHP framework for creating APIs integration principles . ZendCloud is...

Multiple SQL Injection Vulnerabilities in Zend Framework MsSql and SQLite

Zend Framework is a set of open source PHP5 development framework , it is mainly used to develop Web programs and services . Multiple SQL injection vulnerabilities exist in Zend Framework MsSql and SQLite, allowing remote attackers to exploit the vulnerabilities to submit specially crafted SQL...

eBay Magento <= 1.9.2.1 - PHP FPM XML eXternal Entity Injection Vulnerability

Exploit for php platform in category web applications ============================================= - Release date: 29.10.2015 - Discovered by: Dawid Golunski - Severity: High/Critical - eBay Magento ref.: APPSEC-1045 ============================================= I. VULNERABILITY...