599 matches found
Zend Framework < 2.2.5 Trusted Proxy Bypass
Binary data 9145.prm...
Zend Framework < 2.4.9 Encryption Weakness
Binary data 9137.prm...
Zend Framework < 2.2.10 / 2.3.x < 2.3.5 SQL Injection
Binary data 9140.prm...
Zend Framework < 2.3.8 / 2.4.x < 2.4.1 HTTP Response Splitting
Binary data 9138.prm...
Zend Framework < 2.0.1 Multiple XSS
Binary data 9147.prm...
Zend Framework 1.12.x < 1.12.4 / 2.1.x < 2.1.6 / 2.2.x < 2.2.6 Multiple XEE DoS
Binary data 9144.prm...
Zend Framework < 2.3.6 CSRF/XSRF
Binary data 9139.prm...
Zend Framework < 1.12.4 Multiple Vulnerabilities
Binary data 9150.prm...
Zend Framework < 1.12.16 SQL Injection
Binary data 9148.prm...
Zend Framework < 1.12.7 SQL Injection
Binary data 9149.prm...
Zend Framework < 1.12.9 / 2.2.x < 2.2.8 / 2.3.x < 2.3.3 SQL Injection
Binary data 9142.prm...
Zend Framework Version Detection
Binary data 9135.prm...
Zend Framework Web Application Detection
Binary data 9134.prm...
Zend Framework Information Disclosure Vulnerability
Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework. An information disclosure vulnerability exists in ZF. An attacker can exploit this vulnerability by performing a man-in-the-middle attack to impersonate a trusted server and obtain or...
Zend Framework CAPTCHA Challenge Insufficient Entropy Vulnerability
Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services. An insufficient entropy vulnerability exists in ZF. An attacker can exploit this vulnerability to obtain sensitive...
Zend Framework vulnerable to SQL injection
Overview Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability CWE-89 due to the argument of the ORDER BY clause. Hiroshi Tokumaru of HASH Consulting Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...
JVN#71730320: Zend Framework vulnerable to SQL injection
Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability CWE-89 due to the argument of the ORDER BY clause. Impact An attacker who can access the product may execute SQL commands. Solution Update the Software Update to the latest version...
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
More info at https://framework.zend.com/security/advisory/ZF2015-09...