Executive brief
Zend Framework SQL injection vector using null byte for PDO
Affected products
- Packagist zendframework/zendframework1
Junglewise Threat Intelligence
CVE-2015-7695: Zend Framework SQL injection vector using null byte for PDO
CVE-2015-7695 · Severity: low · CVSS 3 · Published 2022-05-17
Technologies: zendframework/zendframework1 (Packagist). Vendors: Packagist.
Related threats
- Zendframework1 Potential SQL injection in ORDER and GROUP functions
- Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability
- ZendFramework1 Potential Insufficient Entropy Vulnerability
- Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
- ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select