10 matches found
EUVD-2022-1994
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2015-7695
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via...
PT-2024-40465
Name of the Vulnerable Software and Affected Versions Zend Framework 1 affected versions not specified Description The issue concerns the PDO adapters in Zend Framework 1, which fail to filter null byte values in SQL statements. This oversight allows an attacker to inject arbitrary SQL code by...
SQL Injection
zendframework/zendframework1 is vulnerable to SQL injection. The PDO adapters do not filter null bytes from SQL statements, allowing attackers to leverage this flaw to inject and execute SQL queries...
Sql injection
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
UBUNTU-CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
CVE-2015-7695: Improper Neutralization of Special Elements used in an SQL Command
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
DLA-326-1 zendframework - security update
Bulletin has no description...
PT-2016-3826
Name of the Vulnerable Software and Affected Versions Zend Framework versions prior to 1.12.16 Description The issue allows remote attackers to execute arbitrary SQL commands via a crafted query, due to the failure of the PDO adapters to filter null bytes in SQL statements. Recommendations For...