oss-security - Re: CVE Request -- Zend Framework -- SQL injection when using PDO

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 24 May 2011 07:55:12 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE Request -- Zend Framework -- SQL injection
 when using PDO_MySql

----- Original Message -----
> Hello, Josh, Steve, vendors,
> 
> a possibility of SQL injection flaw has been reported in Zend
> Framework, when MySQL PDO driver was used:
> [1] http://framework.zend.com/security/advisory/ZF2011-02
> 
> Could you allocate a CVE id for this?
> 

Please use CVE-2011-1939.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.