1148 matches found
SOL10280318 - Zend Framework vulnerability CVE-2016-6233
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
Zend Framework vulnerable to SQL injection
Overview Zend Framework is an open source web application framework. Zend Framework 1 contains an SQL injection vulnerability CWE-89 due to a flaw in processing parameters in the ORDER BY and GROUP BY clauses. Hiroshi Tokumaru of HASH Consulting Corp. reported this vulnerability to IPA. JPCERT/CC...
JVN#18926672: Zend Framework vulnerable to SQL injection
Zend Framework is an open source web application framework. Zend Framework 1 contains an SQL injection vulnerability CWE-89 due to a flaw in processing parameters in the ORDER BY and GROUP BY clauses. Impact Information stored in the database may be obtained or altered by a remote attacker...
CVE-2016-7133
CVE-2016-7133 affects PHP 7.x prior to 7.0.10. Zend/zend_alloc.c mishandles huge reallocs when open_basedir is enabled, causing an integer overflow that can lead to denial of service and possibly other impacts via a long pathname. Public advisories (SUSE Security Update SUSE-SU-2016:2460-1 and re...
CVE-2016-7133
Zend/zendalloc.c in PHP 7.x before 7.0.10, when openbasedir is enabled, mishandles huge realloc operations, which allows remote attackers to cause a denial of service integer overflow or possibly have unspecified other impact via a long pathname...
CVE-2016-7133: Integer Overflow or Wraparound
Zend/zendalloc.c in PHP 7.x before 7.0.10, when openbasedir is enabled, mishandles huge realloc operations, which allows remote attackers to cause a denial of service integer overflow or possibly have unspecified other impact via a long pathname...
PT-2016-7230
Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.0.10 Description The issue is related to a mishandling of huge realloc operations in the zend alloc.c file when open basedir is enabled. This can be exploited by remote attackers using a long pathname, potentially causi...
SOL06430416 - Zend Framework vulnerability CVE-2015-7695
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
F5 BIG-IP - PHP vulnerability CVE-2015-8873
Stack consumption vulnerability in Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service segmentation fault via recursive method calls. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...
PT-2017-8936
Name of the Vulnerable Software and Affected Versions Zend Framework versions prior to 1.12.19 Description The issue allows remote attackers to conduct SQL injection attacks via vectors related to the use of the character pattern w in a regular expression, specifically in the order and group...
Internet Bug Bounty: Use After Free Vulnerability in array_walk()/array_walk_recursive()
https://bugs.php.net/bug.php?id=70713 I think this bugs is still security issue since this bug can be still triggered remotely in some real world&apps. Example: https://github.com/zendframework/zend-loader/blob/ceb32b5129525e1f19b01f37dbbcc6398b0a9635/src/ClassMapAutoloader.phpL210-L215...
Zend Framework SQL Injection Vulnerability
Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework. A SQL injection vulnerability exists in versions of ZF prior to 1.12.19, which can be exploited by attackers to compromise an application, access or modify data, or exploit potential...
zend.com XSS vulnerability
Vulnerable URL: http://www.zend.com/en/solutions/ibm-power-linux?q="alert/OPENBUGBOUNTY/...
Potential SQL injection in ORDER and GROUP statements of Zend_Db_Select
More info at https://framework.zend.com/security/advisory/ZF2016-02...
serverdemo.zend.com XSS vulnerability
Vulnerable URL: http://serverdemo.zend.com:10081/ZendServer/Z-Ray-Id/0@11650@1462445537@2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status...
[SECURITY] Fedora 23 Update: php-ZendFramework2-2.4.10-1.fc23
Zend Framework 2 is an open source framework for developing web applications and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code and utilizes most of the new features of PHP 5.3, namely namespaces, late static binding, lambda functions and closures. Zend Framework 2 evolv...
[SECURITY] Fedora 22 Update: php-ZendFramework2-2.4.10-1.fc22
Zend Framework 2 is an open source framework for developing web applications and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code and utilizes most of the new features of PHP 5.3, namely namespaces, late static binding, lambda functions and closures. Zend Framework 2 evolv...
The vulnerability of the PHP interpreter, which allows a hacker to trigger a service failure
The vulnerability of the function in the Zend/zendexceptions.c interpreter of PHP exists due to the lack of checks for certain Exception objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure such as reassigning a null pointer or...
Zend Framework PDO Adapter Arbitrary Command Execution Vulnerability
Zend Framework ZF is an open source PHP5 development framework for developing web applications and services. In versions prior to Zend Framework 1.12.16, the PDO adapter does not filter null characters within SQL statements, which allows remote attackers to execute arbitrary SQL commands via a...
