Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2011-1939

SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.

Description

SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

zendframework;PHP zendframework

  • 1.10.x before 1.10.9affected
  • 1.11.x before 1.11.6affected

zendframework;PHP PHP

  • before 5.3.6affected

References