Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:14:09 +0000 cnvd-2018-02608 https://cve.radiocsirt.org/vuln/cnvd-2018-02608 cnvd-2018-02608 https://cve.radiocsirt.org/vuln/cnvd-2018-02608 EUVD-2026-100415 https://cve.radiocsirt.org/vuln/euvd-2026-100415 EUVD-2026-100415 https://cve.radiocsirt.org/vuln/euvd-2026-100415 fkie_cve-2014-4914 https://cve.radiocsirt.org/vuln/fkie_cve-2014-4914 <p>The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle parentheses, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.</p> <p>The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle parentheses, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-4914 GHSA-4vqq-fg9c-w77h https://cve.radiocsirt.org/vuln/ghsa-4vqq-fg9c-w77h <p>The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle parentheses, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.</p> <p>The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle parentheses, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-4vqq-fg9c-w77h gsd-2014-4914 https://cve.radiocsirt.org/vuln/gsd-2014-4914 gsd-2014-4914 https://cve.radiocsirt.org/vuln/gsd-2014-4914 jvndb-2015-000197 https://cve.radiocsirt.org/vuln/jvndb-2015-000197 <p>Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability (CWE-89) due to the argument of the ORDER BY clause. Hiroshi Tokumaru of HASH Consulting Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Zend Framework is an open source web application framework. Zend Framework contains an SQL injection vulnerability (CWE-89) due to the argument of the ORDER BY clause. Hiroshi Tokumaru of HASH Consulting Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-000197