1148 matches found
Zend Framework Web Application Detection
Binary data 9134.prm...
The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.
The vulnerability of the zendthroworerror function in the Zend/zendexecuteAPI.c module of the PHP interpreter is related to the use of an uncontrolled format string. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by using format string parameters that involv...
VulnCheck KEV: CVE-2015-1399
PHP remote file inclusion vulnerability in the fetchView function in the MageCoreBlockTemplateZend class in Magento Community Edition CE 1.9.1.0 and Enterprise Edition EE 1.14.1.0 allows remote administrators to execute arbitrary PHP code via a URL in unspecified vectors involving the setScriptPa...
CVE-2015-8617
Format string vulnerability in the zendthroworerror function in Zend/zendexecuteAPI.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling...
Format string
Format string vulnerability in the zendthroworerror function in Zend/zendexecuteAPI.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling...
CVE-2015-8617
Format string vulnerability in the zendthroworerror function in Zend/zendexecuteAPI.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling...
CVE-2015-8617
Format string vulnerability in the zendthroworerror function in Zend/zendexecuteAPI.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling...
CVE-2015-8617
Removed by vendor...
KLA10746 Multiple vulnerabilities in PHP
Multiple serious vulnerabilities have been found in PHP. Malicious users can exploit these vulnerabilities to cause denial of service, affect arbitrary files, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Multiple integer overflows can be...
PT-2016-1106
Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.0.1 Description The issue is related to a format string vulnerability in the zend throw or error function. This vulnerability allows remote attackers to execute arbitrary code via format string specifiers in a string th...
CVE-2015-8617: Use of Externally-Controlled Format String
Format string vulnerability in the zendthroworerror function in Zend/zendexecuteAPI.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling...
Zend Framework Information Disclosure Vulnerability
Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework. An information disclosure vulnerability exists in ZF. An attacker can exploit this vulnerability by performing a man-in-the-middle attack to impersonate a trusted server and obtain or...
Zend Framework CAPTCHA Challenge Insufficient Entropy Vulnerability
Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services. An insufficient entropy vulnerability exists in ZF. An attacker can exploit this vulnerability to obtain sensitive...
Zend Framework vulnerable to SQL injection
Overview Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability CWE-89 due to the argument of the ORDER BY clause. Hiroshi Tokumaru of HASH Consulting Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...
JVN#71730320: Zend Framework vulnerable to SQL injection
Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability CWE-89 due to the argument of the ORDER BY clause. Impact An attacker who can access the product may execute SQL commands. Solution Update the Software Update to the latest version...
Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKey
More info at https://framework.zend.com/security/advisory/ZF2015-10...
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
More info at https://framework.zend.com/security/advisory/ZF2015-09...
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
More info at https://framework.zend.com/security/advisory/ZF2015-09...