The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle parentheses, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.
Published at: December 29, 2017 at 02:29PM
View on website
New vulnerability on the NVD: CVE-2014-4914
Tag: government hack NVD security
No comments: