https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:22:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-84777 EUVD-2026-84777 https://cve.radiocsirt.org/vuln/euvd-2026-84777 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4861 <p>The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.</p> <p>The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-4861 https://cve.radiocsirt.org/vuln/ghsa-xfjq-w3cw-h5fq <p><strong>Affected:</strong> Packagist: zendframework/zendframework</p> <p>The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.</p> <p><strong>Affected:</strong> Packagist: zendframework/zendframework</p> <p>The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.</p> https://cve.radiocsirt.org/vuln/ghsa-xfjq-w3cw-h5fq https://cve.radiocsirt.org/vuln/gsd-2016-4861 gsd-2016-4861 https://cve.radiocsirt.org/vuln/gsd-2016-4861 https://cve.radiocsirt.org/vuln/jvndb-2016-000158 <p>Zend Framework is an open source web application framework. Zend Framework 1 contains an SQL injection vulnerability (CWE-89) due to a flaw in processing parameters in the ORDER BY and GROUP BY clauses. Hiroshi Tokumaru of HASH Consulting Corp. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Zend Framework is an open source web application framework. Zend Framework 1 contains an SQL injection vulnerability (CWE-89) due to a flaw in processing parameters in the ORDER BY and GROUP BY clauses. Hiroshi Tokumaru of HASH Consulting Corp. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2016-000158 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4861 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: zend-framework</p> <p>The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: zend-framework</p> <p>The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4861