ZF2019-01: Information disclosure in zend-developer-tools #Security #Vulnerability #SoftwareDevelopment
ZF2018-01: URL rewrite vulnerability #Security #Vulnerability #Framework
ZF2016-04: Potential remote code execution in zend-mail via Sendmail adapter #Security #Zend #Vulnerability
ZF2016-03: Potential SQL injection in ORDER and GROUP functions of ZF1 #Security #SQLInjection #ZendFramework
ZF2016-02: Potential SQL injection in ORDER and GROUP statements of Zend_Db_Select #Security #SQL #Framework
ZF2016-01: Potential Insufficient Entropy Vulnerability in Zend Framework 1 #Security #Vulnerability #SoftwareDevelopment
ZF2015-10: Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKey #Security #Vulnerabilities #ZendFramework
ZF2015-09: Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word #Security #Vulnerabilities #Software
ZF2015-08: Potential SQL injection vector using null byte for PDO (MsSql, SQLite) #Security #SQLInjection #PHP
ZF2015-07: Filesystem Permissions Issues in Multiple Components #Security #Vulnerabilities #Framework
ZF2015-06: XXE/XEE vector when using ZendXml on multibyte payloads #Security #PHP #Vulnerabilities
AG2015-01: Potential Authenticated User Spoofing in zf-oauth2 #Security #Vulnerabilities #OpenSource
ZF2015-05: Potential XSS and Open Redirect vectors in zend-diactoros #Security #OpenSource #XSS
ZF2015-04: Potential CRLF injection attacks in mail and HTTP headers #Security #Vulnerabilities #WebDevelopment
ZF2015-03: Invalid CSRF validation of null or incorrectly formatted token identifiers #Security #Vulnerability #WebDev