Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zend framework 1.9.4 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-4417
The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent malicious users to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."
Zend FrameworkZend Framework 1.9.4Zend Framework 1.9.0Zend Framework 1.8.3Zend Framework 1.8.2Zend Framework 1.8.1Zend Framework 1.8.0Zend Framework 1.6.0Zend Framework 1.0.0Zend Framework 0.9.3Zend Framework 1.7.7Zend Framework 1.7.0Zend Framework 1.6.2Zend Framework 1.5.2Zend Framework 1.5.0Zend Framework 1.0.4Zend Framework 1.0.2Zend Framework 0.9.2Zend Framework 0.9.0Zend Framework 0.1.3Zend Framework 1.9.2Zend Framework 1.9.1
NA
CVE-2012-6531
(1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x prior to 1.11.13 and 1.12.x prior to 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote malicious users to read arbitrary files or create TCP connections via an external entity reference ...
Zend Zend Framework 1.6.0Zend Zend Framework 1.6.1Zend Zend Framework 1.6.2Zend Zend Framework 1.7.0Zend Zend Framework 1.7.1Zend Zend Framework 1.8.4Zend Zend Framework 1.8.5Zend Zend Framework 1.9.0Zend Zend Framework 1.9.1Zend Zend Framework 1.10.6Zend Zend Framework 1.10.7Zend Zend Framework 1.10.8Zend Zend Framework 1.11.0Zend Zend Framework 1.12.0Zend Zend Framework 1.5.0Zend Zend Framework 1.5.2Zend Zend Framework 1.7.2Zend Zend Framework 1.7.4Zend Zend Framework 1.8.1Zend Zend Framework 1.8.3Zend Zend Framework 1.9.2Zend Zend Framework 1.9.4
NA
CVE-2012-6532
(1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x prior to 1.11.13 and 1.12.x prior to 1.12.0 allow remote malicious users to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definition in an XML...
Zend Zend Framework 1.0.4Zend Zend Framework 1.7.0Zend Zend Framework 1.7.1Zend Zend Framework 1.7.8Zend Zend Framework 1.7.9Zend Zend Framework 1.9.0Zend Zend Framework 1.9.1Zend Zend Framework 1.10.0Zend Zend Framework 1.10.1Zend Zend Framework 1.10.8Zend Zend Framework 1.11.0Zend Zend Framework 1.5.0Zend Zend Framework 1.5.1Zend Zend Framework 1.5.2Zend Zend Framework 1.7.2Zend Zend Framework 1.7.3Zend Zend Framework 1.8.0Zend Zend Framework 1.8.1Zend Zend Framework 1.9.2Zend Zend Framework 1.9.3Zend Zend Framework 1.9.4Zend Zend Framework 1.10.2
NA
CVE-2014-2685
The GenericConsumer class in the Consumer component in ZendOpenId prior to 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 prior to 1.12.4 violate the OpenID 2.0 protocol by ensuring only that at least one field is signed, which allows remote malicious users to bypas...
Zend Zend Framework 1.9.7Zend Zend Framework 1.9.6Zend Zend Framework 1.9.0Zend Zend Framework 1.8.1Zend Zend Framework 1.8.0Zend Zend Framework 1.7.5Zend Zend Framework 1.7.4Zend Zend Framework 1.7.0Zend Zend Framework 1.6.2Zend Zend Framework 1.6.1Zend Zend Framework 1.5.1Zend Zend Framework 1.5.0Zend Zend Framework 1.12.0Zend Zend Framework 1.11.7Zend Zend Framework 1.11.6Zend Zend Framework 1.9.5Zend Zend Framework 1.9.4Zend Zend Framework 1.8.5Zend Zend Framework 1.7.3Zend Zend Framework 1.6.0Zend Zend Framework 1.12.2Zend Zend Framework 1.11.5
NA
CVE-2015-5161
The Zend_Xml_Security::scan in ZendXml prior to 1.0.1 and Zend Framework prior to 1.12.14, 2.x prior to 2.4.6, and 2.5.x prior to 2.5.2, when running under PHP-FPM in a threaded environment, allows remote malicious users to bypass security checks and conduct XML external entity (...
Zend Zend Framework 1.0.0Zend Zend Framework 1.5.0Zend Zend Framework 1.5.1Zend Zend Framework 1.6.1Zend Zend Framework 1.6.2Zend Zend Framework 1.7.3Zend Zend Framework 1.7.4Zend Zend Framework 1.8.0Zend Zend Framework 1.8.1Zend Zend Framework 1.9.0Zend Zend Framework 1.9.5Zend Zend Framework 1.9.6Zend Zend Framework 1.10.2Zend Zend Framework 1.10.3Zend Zend Framework 1.11.0Zend Zend Framework 1.11.6Zend Zend Framework 1.11.7Zend Zend Framework 1.11.8Zend Zend Framework 1.12.0Zend Zend Framework 1.12.5Zend Zend Framework 1.12.6Zend Zend Framework 2.0.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook