Showing 1 - 1 of 1

CVE-2012-3363

Status Candidate

Overview

Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.

Related Files

Debian Security Advisory 2505-1: Posted Jun 29, 2012; Authored by Debian | Site debian.org; Debian Linux Security Advisory 2505-1 - An XML External Entities inclusion vulnerability was discovered in Zend Framework, a PHP library. This vulnerability may allow attackers to access to local files, depending on how the framework is used.; tags | advisory, local, php, xxe; systems | linux, debian; advisories | CVE-2012-3363; SHA-256 | d45dbbe7fa51ef7a30834fdc072c235fb62211ea1d381d9c18fffe4027dd77c5; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 389 files
Ubuntu 92 files
Debian 30 files
BugsBD Limited 21 files
Rahad Chowdhury 21 files
Gentoo 18 files
tmrswrr 12 files
Google Security Research 5 files
Ph0s 5 files
R0ckE7 5 files

File Archives

Systems

AIX (429)
Apple (2,037)
BSD (375)
CentOS (57)
Cisco (1,926)
Debian (6,914)
Fedora (1,692)
FreeBSD (1,246)
Gentoo (4,379)
HPUX (880)
iOS (363)
iPhone (108)
IRIX (220)
Juniper (69)
Linux (47,850)
Mac OS X (691)
Mandriva (3,105)
NetBSD (256)
OpenBSD (486)
RedHat (14,624)
Slackware (941)
Solaris (1,611)
SUSE (1,444)
Ubuntu (9,137)
UNIX (9,340)
UnixWare (187)
Windows (6,606)
Other

CVE-2012-3363

Overview

Related Files

File Archive:

December 2023

Top Authors In Last 30 Days

File Tags

File Archives

Systems