Lucene search
PRIOn knowledge basePRION:CVE-2012-6531HistoryFeb 13, 2013 - 5:55 p.m.
Xxe
2013-02-1317:55:00
PRIOn knowledge base
www.prio-n.com
6
(1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack, a different vulnerability than CVE-2012-3363.
References
Related
ubuntucve
ubuntucve
CVE-2012-6531
2013-02-13 00:00:00
CVE-2012-3363
2013-02-13 00:00:00
nvd
nvd
CVE-2012-6531
2013-02-13 17:55:01
CVE-2012-3363
2013-02-13 17:55:01
cve
cve
CVE-2012-6531
2022-10-03 16:15:27
CVE-2012-3363
2013-02-13 17:55:01
osv
osv
Zend Framework XEE Vulnerability
2022-05-17 05:14:21
Zend Framework XXE Vulnerability
2022-05-17 04:56:50
zendframework - regression update
2015-06-23 00:00:00
github
github
Zend Framework XEE Vulnerability
2022-05-17 05:14:21
Zend Framework XXE Vulnerability
2022-05-17 04:56:50
cvelist
cvelist
CVE-2012-6531
2022-10-03 16:15:27
CVE-2012-3363
2013-02-13 17:00:00
openvas
openvas
Fedora Update for php-ZendFramework FEDORA-2012-9979
2012-08-30 00:00:00
Debian: Security Advisory (DSA-2505-1)
2012-08-10 00:00:00
FreeBSD Ports: ZendFramework
2012-10-22 00:00:00
nessus
nessus
Fedora 17 : php-ZendFramework-1.11.12-1.fc17 (2012-9979)
2012-07-16 00:00:00
Debian DSA-2505-1 : zendframework - information disclosure
2012-07-03 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: php-ZendFramework-1.11.12-1.fc17
2012-07-14 21:59:54
[SECURITY] Fedora 16 Update: php-ZendFramework-1.11.12-1.fc16
2012-07-14 21:56:10
[SECURITY] Fedora 17 Update: moodle-2.2.9-1.fc17
2013-04-03 04:26:27
checkpoint_advisories
checkpoint_advisories
prion
prion
Xxe
2013-02-13 17:55:00
freebsd
freebsd
Zend Framework -- Multiple vulnerabilities via XXE injection
2012-06-26 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_ZEND_XMLRPC
2013-02-13 17:55:00
debian
debian
[SECURITY] [DSA 2505-1] zendframework security update
2012-06-29 19:42:45
[SECURITY] [DLA 251-1] zendframework security update
2015-06-20 18:40:57
[SECURITY] [DLA 251-2] zendframework regression update
2015-06-23 20:26:59