Security advisories

critical2024-06-07

Zendframework1 Potential SQL injection in ORDER and GROUP functions

GHSA-6fqw-j3vm-7f66

high2024-06-07

Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability

GHSA-848f-mph5-9pm9

high2024-06-07

ZendFramework1 Potential Insufficient Entropy Vulnerability

GHSA-8xhv-gqm4-3w99

critical2024-06-07

Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)

GHSA-v42g-7q2x-cw32

critical2024-06-07

ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select

GHSA-2x36-qhx3-7m5f

high2024-06-07

Zendframework potential security issue in login mechanism

GHSA-9v78-h226-2rmq

medium2024-06-07

Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed

GHSA-4vf6-mq7w-3hp6

medium2024-06-07

Zendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide`

GHSA-4v57-pwvf-x35j

medium2024-06-07

Zendframework Potential XSS or HTML Injection vector in Zend_Json

GHSA-vvm3-rv48-j3g5

medium2024-06-07

ZendFramework1 Potential Security Issues in Bundled Dojo Library

GHSA-w5mj-j45q-m638

high2024-06-07

Zendframework Local file disclosure via XXE injection in Zend_XmlRpc

GHSA-229x-22xc-2f2w

high2024-06-07

Zendframework Denial of Service vector via XEE injection

GHSA-2jx7-xg83-j2m7

medium2024-06-07

ZendFramework Cross-site Scripting vector in `Zend_Filter_StripTags`

GHSA-gwpm-pm6x-h7rj

medium2024-06-07

ZendFramework Potential Cross-site Scripting in Development Environment Error View Script

GHSA-g52p-86j5-xr8q

critical2024-06-07

ZendFramework potential XML eXternal Entity injection vectors

GHSA-mhpx-3rv8-wrjm

high2024-06-07

ZendFramework potential XML eXternal Entity injection vectors

GHSA-4j9x-g4x8-vcmf

medium2024-06-07

ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings

GHSA-hg35-vqp3-fv39

critical2024-06-07

ZendFramework potential SQL Injection Vector When Using PDO_MySql

GHSA-qf36-fx9f-232x

medium2024-06-07

ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`

GHSA-j543-vg33-g6vj

high2024-06-07

ZendFramework local file inclusion vector in `Zend_View::setScriptPath()` and `render()`

GHSA-hx3m-959f-v849