description: SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.
problem types: potential SQL injection vector when using PDO_MySql (ZF2011-02)
affected:
{
product: zendframework
vendor: zendframework;PHP
versions:
status: affected, version: 1.10.x before 1.10.9
status: affected, version: 1.11.x before 1.11.6
}
{
product: PHP
vendor: zendframework;PHP
versions:
status: affected, version: before 5.3.6
}
