CVE-2011-1939: SQL Injection
SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDOMySql in PHP before 5.3.6.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2011-1939?
CVE-2011-1939 is a SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.
How severe is CVE-2011-1939?
CVE-2011-1939 has a severity rating of 9.8 (Critical).
What software versions are affected by CVE-2011-1939?
Zend Framework versions 1.10.0 to 1.10.9 and 1.11.0 to 1.11.6, and PHP versions up to 5.3.6 are affected by CVE-2011-1939.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2011-1939?
The Common Weakness Enumeration (CWE) ID for CVE-2011-1939 is CWE-89 (SQL Injection).
How can I fix CVE-2011-1939?
To fix CVE-2011-1939, it is recommended to upgrade Zend Framework to version 1.10.9 or 1.11.6 and PHP to a version higher than 5.3.6.