Vulnerabilities

TI-2015-00237 CVE-2015-0270 · GHSA-v59p-p692-v382

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

MEDIUM 44

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01103 Published 2019-10-25 Fixed in 2.2.10, 2.3.5 CWE-89

TI-2011-03382 CVE-2011-3825 · GHSA-fhjm-rh64-w3x4

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive…

LOW 26

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Valid…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01456 Published 2011-09-24 No fix listed CWE-200

TI-2009-04180 CVE-2009-4417 · GHSA-m29x-48p8-pr8r

The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows…

LOW 24

The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0086 Published 2009-12-24 No fix listed CWE-264

Vulnerabilities

Filters

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive…

The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows…