Zend Framework vulnerabilities
3 known vulnerabilities affecting zend/framework.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2015-0270CRITICALCVSS 9.8fixed in 2.2.10≥ 2.3.0, < 2.3.52019-10-25
CVE-2015-0270 [CRITICAL] CWE-89 CVE-2015-0270: Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\D
Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.
nvd
CVE-2011-3825MEDIUMCVSS 5.0v1.11.32011-09-24
CVE-2011-3825 [MEDIUM] CWE-200 CVE-2011-3825: Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive informatio
Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files.
nvd
CVE-2009-4417MEDIUMCVSS 5.0≤ 1.9.6v0.1.3+43 more2009-12-24
CVE-2009-4417 [MEDIUM] CWE-264 CVE-2009-4417: The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-depend
The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."
nvd