CVE-2015-7695
EUVD-2022-199407.06.2016, 14:06
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| zend | zend_framework | 𝑥 ≤ 1.12.15 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| zend-framework |
| ||||||||||||||||||||||||||||||||||||||
| zendframework |
|
References