CVE-2015-7695

Packagist/zendframework/zendframework1 CVE-2015-7695: critical 9.8

Zend Framework SQL injection vector using null byte for PDO

Action: Upgrade zendframework/zendframework1 to 1.12.16 or later.

composer require zendframework/zendframework1:1.12.16

Affected

Fixed versions

Sources

• osv: GHSA-2hvh-c5c2-vj85
• https://nvd.nist.gov/vuln/detail/CVE-2015-7695
• https://github.com/zendframework/zf1
• http://framework.zend.com/security/advisory/ZF2015-08
• http://www.debian.org/security/2015/dsa-3369
• http://www.openwall.com/lists/oss-security/2015/09/30/6
• http://www.openwall.com/lists/oss-security/2015/09/30/8
• http://www.openwall.com/lists/oss-security/2015/10/11/3
• http://www.securityfocus.com/bid/76784

CVE-2015-7695 · published 2022-05-17T03:44:23Z · modified 2024-04-23T23:26:47.127570Z · JSON