Debian » Debian Linux : Security Vulnerabilities, CVEs, Published In 2016 (Sql injection)
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.
Max CVSS
9.8
EPSS Score
1.63%
Published
2016-06-07
Updated
2016-11-28
1 vulnerabilities found