CVE-2014-8089 in Framework
Summary
SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
10/10/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67994 | Zend Framework sql injection | 89 | High | Official fix | CVE-2014-8089 |