CVE-2014-8089 in Zend Framework
요약 (영어)
SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.
예약하다
2014. 10. 10.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 67994 | Zend Framework SQL 주입 | 89 | 높음 | 공식 수정 | CVE-2014-8089 |