GHSA-2hvh-c5c2-vj85

Zend Framework SQL injection vector using null byte for PDO

Source: GitHub Advisory Database (reviewed) Critical CVE-2015-7695

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	zendframework/zendframework1	< 1.12.16	1.12.16

Details

As written in the advisory (Markdown source, shown as plain text).

The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2015-7695 advisory
https://github.com/zendframework/zf1 package
http://framework.zend.com/security/advisory/ZF2015-08 web
http://www.debian.org/security/2015/dsa-3369 web
http://www.openwall.com/lists/oss-security/2015/09/30/6 web
http://www.openwall.com/lists/oss-security/2015/09/30/8 web
http://www.openwall.com/lists/oss-security/2015/10/11/3 web
http://www.securityfocus.com/bid/76784 web