Executive brief
Zendframework1 Potential SQL injection in ORDER and GROUP functions
Affected products
- Packagist zendframework/zendframework1
Junglewise Threat Intelligence
Zendframework1 Potential SQL injection in ORDER and GROUP functions
Severity: low · CVSS 3.1 · Published 2024-06-07
Technologies: zendframework/zendframework1 (Packagist). Vendors: Packagist.
Related threats
- Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability
- ZendFramework1 Potential Insufficient Entropy Vulnerability
- Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
- ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select
- Zendframework potential security issue in login mechanism