En resumen
- CVE-2016-4861 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a zendframework/zendframework, zend framework (zend).
- Probabilidad de explotación en los próximos 30 días (EPSS): 4.1%, mayor que el 90.8% de las vulnerabilidades.
- Solución: actualizar a 1.12.20 o posterior.
Description
The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.
NVD description
The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.
Más vulnerabilidades de zendframework/zendframework
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free