CVE
- Id
- 84972
- CVE No.
- CVE-2015-7695
- Status
- Candidate
- Description
- The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.
- Phase
- Assigned (20151004)
- Votes
- None (candidate not yet proposed)
- Comments