Package · Packagist

zendframework/zend-db

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Critical 9.8

CVE-2014-8089

Zend Framework SQL injection vulnerability

SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.

zendframework/zendframework1 zendframework/zendframework zend-framework zendframework/zend-db Ubuntu Packagist

Feb 17, 2020
Critical 9.8

CVE-2015-0270

Zend Framework Allows SQL Injection

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

Zend Zend Framework zendframework/zendframework zendframework/zend-db Packagist

Oct 25, 2019