https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:14:03.040659+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-02608 cnvd-2018-02608 2026-10-03T01:14:03.136217+00:00 cnvd-2018-02608 https://cve.radiocsirt.org/vuln/euvd-2026-100415 EUVD-2026-100415 2026-10-03T01:14:03.136253+00:00 EUVD-2026-100415 https://cve.radiocsirt.org/vuln/fkie_cve-2014-4914 fkie_cve-2014-4914 2026-10-03T01:14:03.136267+00:00

The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle parentheses, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-4vqq-fg9c-w77h GHSA-4vqq-fg9c-w77h 2026-10-03T01:14:03.136295+00:00

The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle parentheses, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2014-4914 gsd-2014-4914 2026-10-03T01:14:03.136311+00:00 gsd-2014-4914 https://cve.radiocsirt.org/vuln/jvndb-2015-000197 jvndb-2015-000197 2026-10-03T01:14:03.136322+00:00

Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability (CWE-89) due to the argument of the ORDER BY clause. Hiroshi Tokumaru of HASH Consulting Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.