PT-2024-40465 · Zend+1 · Zend Framework 1+1

Published 2024-06-07 · Updated 2024-06-07

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zend Framework 1 (affected versions not specified)

Description The issue concerns the PDO adapters in Zend Framework 1, which fail to filter null byte values in SQL statements. This oversight allows an attacker to inject arbitrary SQL code by appending it after a null byte in a query, thus facilitating a SQL injection attack. Testing has confirmed the vulnerability using pdo dblib (FreeTDS) on a Linux system to access a remote Microsoft SQL Server, as well as against pdo sqlite.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

GHSA-V42G-7Q2X-CW32

Affected Products

Sql Server

Zend Framework 1

References · 4

• https://osv.dev/vulnerability/GHSA-v42g-7q2x-cw32 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2015-08.yaml · Note
• https://github.com/zendframework/zf1 · Note
• https://framework.zend.com/security/advisory/ZF2015-08 · Note