Archive

17 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /17 March 2020 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2014-8089

Zend Framework SQL injection vulnerability

SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.

zendframework/zendframework1 zendframework/zendframework zend-framework zendframework/zend-db Ubuntu Packagist

Feb 17, 2020