PT-2019-7121

Name of the Vulnerable Software and Affected Versions Zend Framework affected versions not specified Description The issue is related to a potential cross-site scripting vector in multiple view helpers. Recommendations At the moment, there is no information about a newer version that contains a f...

CVE-2011-1939

SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDOMySql in PHP before 5.3.6...

Sql injection

SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDOMySql in PHP before 5.3.6...

CVE-2011-1939

SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDOMySql in PHP before 5.3.6...

CVE-2011-1939

SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDOMySql in PHP before 5.3.6...

CVE-2011-1939

CVE-2011-1939 is a SQL injection vulnerability in Zend Framework when using non-ASCII-compatible encodings with PDO_MySql in PHP before 5.3.6. Affected are Zend Framework 1.10.x prior to 1.10.9 and 1.11.x prior to 1.11.6. The underlying issue is in the encoding handling with PDO_MySql that can al...

PT-2019-6635

Name of the Vulnerable Software and Affected Versions Zend Framework versions 1.10.x through 1.10.8 Zend Framework versions 1.11.x through 1.11.5 PHP versions prior to 5.3.6 Description The issue is related to a SQL injection vulnerability when using non-ASCII-compatible encodings in conjunction...

CVE-2011-1939: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDOMySql in PHP before 5.3.6...

CVE-2015-0270

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter...

CVE-2015-0270

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter...

Sql injection

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter...

CVE-2015-0270

Zend Framework versions affected: <2.2.10 and with a potential SQL injection in the PostgreSQL Zend\Db adapter. Root cause: improper handling/validation in the Zend\Db adapter leading to injectable SQL when interacting with PostgreSQL. Impact: potential disclosure or modification of data via ...

CVE-2015-0270

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter...

CVE-2015-0270

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter...

CVE-2015-0270: Improper Neutralization of Special Elements used in an SQL Command

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter...

PT-2019-7160

Name of the Vulnerable Software and Affected Versions Zend Framework versions 2.2.x through 2.2.9 Zend Framework versions 2.3.x through 2.3.4 Description The issue is related to a potential SQL injection in the PostgreSQL ZendDb adapter. Recommendations For versions 2.2.x through 2.2.9, update to...

Remote Code Execution (RCE)

PHP is vulnerable to remote code execution. This is because Zend/zendhash.c in PHP mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service...

Pimcore < 5.71 Unserialize Remote Code Execution Exploit

This Metasploit module exploits a PHP unserialize in Pimcore before 5.7.1 to execute arbitrary code. An authenticated user with "classes" permission could exploit the vulnerability. The vulnerability exists in the "ClassController.php" class, where the "bulk-commit" method makes it possible to...

Pimcore < 5.71 - Unserialize Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Pimcore Unserialize RCE", 'Description' = %q This module exploits a PHP unserialize in Pimcore before 5.7.1 to execute arbitrary code. An...

GLSA-201811-05 : PHProjekt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201811-05 PHProjekt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHProjekt due to embedded Zend Framework. Please review the GLSA identifiers referenced below for details. Impact : Remote attackers...