CVE:CVE-2015-10084
CNNVD:CNNVD-202302-1708
klear-library是Irontec开源的一个 Zend Framework 1 公共站点外部库。
Irontec klear-library chloe存在SQL注入漏洞，该漏洞源于文件Controller/Rest/BaseController.php的函数_prepareWhere存在问题，会导致sql注入。
solution:Upgrade irontec klear-library to a higher version than 2015-10-15,and avoid the version (,2015-10-15)