EDB-35784

functional

Zend Framework 1.11.4 - 'PDO_MySql' Security Bypass

view exploit source exploit_dbverifiedtype remoteauthor Anthony Ferrarapublished 2011-05-19catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2011-1939US	critical9.8	3.86% (90th)	Exploit	2019-11-26
SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.