Lucene search
Veracode Vulnerability DatabaseVERACODE:4673HistoryJul 25, 2017 - 10:08 p.m.
SQL Injection
2017-07-2522:08:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.019 Low
EPSS
Percentile
88.7%
ZendFramework is vulnerable to SQL Injection. The order and group methods in library/Zend/Db/Select.php does not sanitize the user input properly, allowing a malicious user to inject and execute arbitrary SQL queries.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zendframework/zendframework1 | le | 1.12.18 |
Related
mageia
mageia
Updated php-ZendFramework packages fix security vulnerability
2016-08-03 13:57:01
cvelist
cvelist
CVE-2016-6233
2017-02-16 18:00:00
nvd
nvd
CVE-2016-6233
2017-02-17 02:59:13
cve
cve
CVE-2016-6233
2017-02-17 02:59:13
osv
osv
Zend Framework Allows SQL Injection
2022-05-14 02:19:45
prion
prion
Sql injection
2017-02-17 02:59:00
github
github
Zend Framework Allows SQL Injection
2022-05-14 02:19:45
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0272)
2022-01-28 00:00:00
Fedora Update for php-ZendFramework FEDORA-2016-7f193a0c59
2016-11-14 00:00:00
Fedora Update for php-ZendFramework FEDORA-2016-666d95d1d5
2016-12-07 00:00:00
f5
f5
SOL10280318 - Zend Framework vulnerability CVE-2016-6233
2016-09-20 00:00:00
K10280318 : Zend Framework vulnerability CVE-2016-6233
2016-09-20 00:00:00
ubuntucve
ubuntucve
CVE-2016-6233
2017-02-17 00:00:00
friendsofphp
friendsofphp
Potential SQL injection in ORDER and GROUP statements of Zend_Db_Select
2016-07-06 17:01:58
fedora
fedora
[SECURITY] Fedora 25 Update: php-ZendFramework-1.12.20-1.fc25
2016-10-09 03:26:26
[SECURITY] Fedora 24 Update: php-ZendFramework-1.12.20-1.fc24
2016-10-09 06:28:49
[SECURITY] Fedora 23 Update: php-ZendFramework-1.12.20-1.fc23
2016-10-09 09:29:08
nessus
nessus
Amazon Linux AMI : php-ZendFramework (ALAS-2016-767)
2016-11-21 00:00:00
Fedora 23 : php-ZendFramework (2016-77e5105570)
2016-10-10 00:00:00
Fedora 24 : php-ZendFramework (2016-7f193a0c59)
2016-10-10 00:00:00
amazon
amazon
Medium: php-ZendFramework
2016-11-18 12:30:00
gentoo
gentoo
Zend Framework: Multiple vulnerabilities
2018-04-09 00:00:00