Executive brief
Zend Framework Allows SQL Injection
Affected products
- Packagist zendframework/zendframework
- Packagist zendframework/zendframework1
Junglewise Threat Intelligence
CVE-2016-6233: Zend Framework Allows SQL Injection
CVE-2016-6233 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: zendframework/zendframework (Packagist), zendframework/zendframework1 (Packagist). Vendors: Packagist.
Related threats
- Zendframework1 Potential SQL injection in ORDER and GROUP functions
- Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability
- ZendFramework1 Potential Insufficient Entropy Vulnerability
- Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
- ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select