| Package | Affected versions | Patched versions |
|---|---|---|
| zendframework/zend-db | ≥ 2.0.0, < 2.0.99≥ 2.1.0, < 2.1.99≥ 2.2.0, < 2.2.8≥ 2.3.0, < 2.3.3 | 2.0.992.1.992.2.82.3.3 |
| zendframework/zendframework | ≥ 2.0.0, < 2.0.99≥ 2.1.0, < 2.1.99≥ 2.2.0, < 2.2.8≥ 2.3.0, < 2.3.3 | 2.0.992.1.992.2.82.3.3 |
| zendframework/zendframework1 | ≥ 1.12.0, < 1.12.9 | 1.12.9 |
| zend framework | ≥ 2.2.0, < 2.2.8≥ 2.3.0, < 2.3.3< 1.12.9 | 2.2.82.3.31.12.9 |
SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free