oss-sec mailing list archives

Re: CVE Request -- Zend Framework -- SQL injection when using PDO_MySql


From: Josh Bressers <bressers () redhat com>
Date: Tue, 24 May 2011 07:55:12 -0400 (EDT)

----- Original Message -----
Hello, Josh, Steve, vendors,

a possibility of SQL injection flaw has been reported in Zend
Framework, when MySQL PDO driver was used:
[1] http://framework.zend.com/security/advisory/ZF2011-02

Could you allocate a CVE id for this?


Please use CVE-2011-1939.

Thanks.

-- 
    JB


Current thread: