SQL injection - Code In zendframework/zendframework
Description
Zend Framework Allows SQL Injection
The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors related to use of the character pattern [\w]* in a regular expression.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 1.12.19 | ||
packagist | 1.12.19 |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3. 4. 5. 6.