599 matches found
PT-2017-8936
Name of the Vulnerable Software and Affected Versions Zend Framework versions prior to 1.12.19 Description The issue allows remote attackers to conduct SQL injection attacks via vectors related to the use of the character pattern w in a regular expression, specifically in the order and group...
Internet Bug Bounty: Use After Free Vulnerability in array_walk()/array_walk_recursive()
https://bugs.php.net/bug.php?id=70713 I think this bugs is still security issue since this bug can be still triggered remotely in some real world&apps. Example: https://github.com/zendframework/zend-loader/blob/ceb32b5129525e1f19b01f37dbbcc6398b0a9635/src/ClassMapAutoloader.phpL210-L215...
Zend Framework SQL Injection Vulnerability
Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework. A SQL injection vulnerability exists in versions of ZF prior to 1.12.19, which can be exploited by attackers to compromise an application, access or modify data, or exploit potential...
Potential SQL injection in ORDER and GROUP statements of Zend_Db_Select
More info at https://framework.zend.com/security/advisory/ZF2016-02...
[SECURITY] Fedora 23 Update: php-ZendFramework2-2.4.10-1.fc23
Zend Framework 2 is an open source framework for developing web applications and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code and utilizes most of the new features of PHP 5.3, namely namespaces, late static binding, lambda functions and closures. Zend Framework 2 evolv...
[SECURITY] Fedora 22 Update: php-ZendFramework2-2.4.10-1.fc22
Zend Framework 2 is an open source framework for developing web applications and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code and utilizes most of the new features of PHP 5.3, namely namespaces, late static binding, lambda functions and closures. Zend Framework 2 evolv...
Zend Framework PDO Adapter Arbitrary Command Execution Vulnerability
Zend Framework ZF is an open source PHP5 development framework for developing web applications and services. In versions prior to Zend Framework 1.12.16, the PDO adapter does not filter null characters within SQL statements, which allows remote attackers to execute arbitrary SQL commands via a...
CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
UBUNTU-CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
Sql injection
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
CVE-2015-7695
CVE-2015-7695 affects Zend Framework’s PDO adapters in versions before 1.12.16. The issue is that null bytes are not filtered in SQL statements, allowing remote attackers to execute arbitrary SQL via a crafted query. Impact is remote, with network access and high severity in typical assessments. ...
CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
CVE-2015-7695: Improper Neutralization of Special Elements used in an SQL Command
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
PT-2017-7207
Name of the Vulnerable Software and Affected Versions Zend Framework versions prior to 2.4.9 zend-crypt versions 2.4.x prior to 2.4.9 zend-crypt versions 2.5.x prior to 2.5.2 Description The issue allows remote attackers to recover the RSA private key. Recommendations For Zend Framework versions...
Zend Framework < 1.12.16 SQL Injection
Binary data 9148.prm...
Zend Framework < 2.2.7 / 2.3.x < 2.3.1 XSS
Binary data 9143.prm...