PoC Index85,079 CVEs with PoCs

CVE-2016-4861

CRITICAL 9.8EPSS 4.1%

The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.

CVSS v3.0 NVD
9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 NVD
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
4.12% chance of exploitation in the next 30 days, 91st percentile
Published
2017-02-16
Updated
2024-08-06

Proof-of-concept exploits (1)

Security advisories

References

Related