Zend Framework < 2.0.8 / 2.1.x < 2.1.4 Multiple Vulnerabilities

Binary data 9146.prm...

Zend Framework < 2.2.9 / 2.3.x < 2.3.4 Session Validators Security Bypass

Binary data 9141.prm...

Zend Framework 1.x < 1.12.14 / 2.x < 2.4.6 / 2.5.x < 2.5.2 XXE Injection

Binary data 9136.prm...

Zend Framework < 2.0.1 Multiple XSS

Binary data 9147.prm...

Zend Framework < 2.3.8 / 2.4.x < 2.4.1 HTTP Response Splitting

Binary data 9138.prm...

Zend Framework < 2.3.6 CSRF/XSRF

Binary data 9139.prm...

Zend Framework 1.12.x < 1.12.4 / 2.1.x < 2.1.6 / 2.2.x < 2.2.6 Multiple XEE DoS

Binary data 9144.prm...

Zend Framework < 1.12.4 Multiple Vulnerabilities

Binary data 9150.prm...

Zend Framework < 1.12.9 / 2.2.x < 2.2.8 / 2.3.x < 2.3.3 SQL Injection

Binary data 9142.prm...

Zend Framework < 2.2.10 / 2.3.x < 2.3.5 SQL Injection

Binary data 9140.prm...

Zend Framework < 1.12.7 SQL Injection

Binary data 9149.prm...

Zend Framework Version Detection

Binary data 9135.prm...

Zend Framework Web Application Detection

Binary data 9134.prm...

Zend Framework Information Disclosure Vulnerability

Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework. An information disclosure vulnerability exists in ZF. An attacker can exploit this vulnerability by performing a man-in-the-middle attack to impersonate a trusted server and obtain or...

Zend Framework CAPTCHA Challenge Insufficient Entropy Vulnerability

Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services. An insufficient entropy vulnerability exists in ZF. An attacker can exploit this vulnerability to obtain sensitive...

Zend Framework vulnerable to SQL injection

Overview Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability CWE-89 due to the argument of the ORDER BY clause. Hiroshi Tokumaru of HASH Consulting Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

JVN#71730320: Zend Framework vulnerable to SQL injection

Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability CWE-89 due to the argument of the ORDER BY clause. Impact An attacker who can access the product may execute SQL commands. Solution Update the Software Update to the latest version...

Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKey

More info at https://framework.zend.com/security/advisory/ZF2015-10...

Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word

More info at https://framework.zend.com/security/advisory/ZF2015-09...

Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word

More info at https://framework.zend.com/security/advisory/ZF2015-09...