Vulnerability Database

289,782

Total vulnerabilities in the database

CVE-2015-5161

The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.

  • Published: Aug 25, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-5161
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
zend / zend_framework 2.2.4 2.2.4.x
zend / zend_framework 1.10.6 1.10.6.x
zend / zend_framework 2.3.0 2.3.0.x
zend / zend_framework 1.10.0-beta1 1.10.0-beta1.x
zend / zend_framework 2.0.6 2.0.6.x
zend / zend_framework 1.12.12 1.12.12.x
zend / zend_framework 2.0.0 2.0.0.x
zend / zend_framework 1.12.0-rc3 1.12.0-rc3.x
zend / zend_framework 1.11.0-b1 1.11.0-b1.x
zend / zend_framework 1.10.3 1.10.3.x
zend / zend_framework 2.0.2 2.0.2.x
zend / zend_framework 1.11.4 1.11.4.x
zend / zend_framework 1.7.4 1.7.4.x
zend / zend_framework 2.3.6 2.3.6.x
zend / zend_framework 1.7.5 1.7.5.x
zend / zend_framework 1.12.11 1.12.11.x
zend / zend_framework 1.10.5 1.10.5.x
zend / zend_framework 1.11.11 1.11.11.x
zend / zend_framework 1.10.8 1.10.8.x
zend / zend_framework 1.12.2 1.12.2.x
zend / zend_framework 2.0.1 2.0.1.x
zend / zend_framework 2.1.0 2.1.0.x
zend / zend_framework 1.10.0 1.10.0.x
zend / zend_framework 1.9.6 1.9.6.x
zend / zend_framework 1.12.5 1.12.5.x
zend / zend_framework 1.10.0-alpha1 1.10.0-alpha1.x
zend / zend_framework 1.8.3 1.8.3.x
zend / zend_framework 2.0.0-rc5 2.0.0-rc5.x
zend / zend_framework 1.7.6 1.7.6.x
zend / zend_framework 1.8.0 1.8.0.x
zend / zend_framework 2.3.4 2.3.4.x
zend / zend_framework 1.11.5 1.11.5.x
zend / zend_framework 1.12.7 1.12.7.x
zend / zend_framework 1.8.4-pl1 1.8.4-pl1.x
zend / zend_framework 2.4.3 2.4.3.x
zend / zend_framework 2.4.5 2.4.5.x
zend / zend_framework 1.11.0-rc1 1.11.0-rc1.x
zend / zend_framework 2.0.0-rc1 2.0.0-rc1.x
zend / zend_framework 1.7.2 1.7.2.x
zend / zend_framework 2.0.7 2.0.7.x
zend / zend_framework 2.2.1 2.2.1.x
zend / zend_framework 1.0.0-rc2a 1.0.0-rc2a.x
zend / zend_framework 1.5.0-rc1 1.5.0-rc1.x
zend / zend_framework 1.6.0 1.6.0.x
zend / zend_framework 2.4.1 2.4.1.x
zend / zend_framework 1.9.0-rc1 1.9.0-rc1.x
zend / zend_framework 1.7.0-pr 1.7.0-pr.x
zend / zend_framework 1.9.2 1.9.2.x
zend / zend_framework 1.11.12 1.11.12.x
zend / zend_framework 2.1.4 2.1.4.x
zend / zend_framework 1.9.3 1.9.3.x
zend / zend_framework 1.5.1 1.5.1.x
zend / zend_framework 1.10.4 1.10.4.x
zend / zend_framework 1.6.0-rc2 1.6.0-rc2.x
zend / zend_framework 2.0.0-rc4 2.0.0-rc4.x
zend / zend_framework 1.11.9 1.11.9.x
zend / zend_framework 1.0.0-rc2 1.0.0-rc2.x
zend / zend_framework 1.8.4 1.8.4.x
zend / zend_framework 1.11.6 1.11.6.x
zend / zend_framework 2.0.0-rc6 2.0.0-rc6.x
zend / zend_framework 2.2.2 2.2.2.x
zend / zend_framework 1.8.1 1.8.1.x
zend / zend_framework 1.9.5 1.9.5.x
zend / zend_framework 2.2.8 2.2.8.x
zend / zend_framework 1.6.0-rc3 1.6.0-rc3.x
zend / zend_framework 2.1.5 2.1.5.x
zend / zend_framework 1.9.0-b1 1.9.0-b1.x
zend / zend_framework 2.0.3 2.0.3.x
zend / zend_framework 1.9.0-a1 1.9.0-a1.x
zend / zend_framework 1.12.8 1.12.8.x
zend / zend_framework 2.0.5 2.0.5.x
zend / zend_framework 2.1.2 2.1.2.x
zend / zend_framework 1.12.3 1.12.3.x
zend / zend_framework 2.2.7 2.2.7.x
zend / zend_framework 1.0.0 1.0.0.x
zend / zend_framework 2.0.0-rc3 2.0.0-rc3.x
zend / zend_framework 2.3.9 2.3.9.x
zend / zend_framework 1.11.3 1.11.3.x
zend / zend_framework 1.5.0-rc3 1.5.0-rc3.x
zend / zend_framework 1.5.0-rc2 1.5.0-rc2.x
zend / zend_framework 2.4.4 2.4.4.x
zend / zend_framework 1.11.13 1.11.13.x
zend / zend_framework 1.5.2 1.5.2.x
zend / zend_framework 1.11.2 1.11.2.x
zend / zend_framework 1.9.0 1.9.0.x
zend / zend_framework 1.0.0-rc3 1.0.0-rc3.x
zend / zend_framework 1.0.3 1.0.3.x
zend / zend_framework 1.9.8 1.9.8.x
zend / zend_framework 1.10.0-rc1 1.10.0-rc1.x
zend / zend_framework 1.11.0 1.11.0.x
zend / zend_framework 1.11.10 1.11.10.x
zend / zend_framework 1.6.1 1.6.1.x
zend / zend_framework 1.9.7 1.9.7.x
zend / zend_framework 1.6.2 1.6.2.x
zend / zend_framework 1.9.3-pl1 1.9.3-pl1.x
zend / zend_framework 1.12.1 1.12.1.x
zend / zend_framework 1.7.3-pl1 1.7.3-pl1.x
zend / zend_framework 1.12.0-rc1 1.12.0-rc1.x
zend / zend_framework 1.0.0-rc1 1.0.0-rc1.x
zend / zend_framework 2.3.1 2.3.1.x
zend / zend_framework 2.5.1 2.5.1.x
zend / zend_framework 1.7.0 1.7.0.x
zend / zend_framework 1.10.1 1.10.1.x
zend / zend_framework 1.12.0-rc4 1.12.0-rc4.x
zend / zend_framework 1.8.5 1.8.5.x
zend / zend_framework 1.8.2 1.8.2.x
zend / zend_framework 2.3.2 2.3.2.x
zend / zend_framework 2.1.1 2.1.1.x
zend / zend_framework 2.3.3 2.3.3.x
zend / zend_framework 1.11.8 1.11.8.x
zend / zend_framework 2.2.9 2.2.9.x
zend / zend_framework 2.2.3 2.2.3.x
zend / zend_framework 1.7.1 1.7.1.x
zend / zend_framework 1.7.7 1.7.7.x
zend / zend_framework 1.6.0-rc1 1.6.0-rc1.x
zend / zend_framework 1.9.1 1.9.1.x
zend / zend_framework 1.8.0-b1 1.8.0-b1.x
zend / zend_framework 2.3.8 2.3.8.x
zend / zend_framework 2.4.2 2.4.2.x
zend / zend_framework 1.10.7 1.10.7.x
zend / zend_framework 1.10.9 1.10.9.x
zend / zend_framework 1.11.7 1.11.7.x
zend / zend_framework 2.5.0 2.5.0.x
zend / zend_framework 1.7.9 1.7.9.x
zend / zend_framework 1.0.1 1.0.1.x
zend / zend_framework 1.12.4 1.12.4.x
zend / zend_framework 1.12.6 1.12.6.x
zend / zend_framework 2.4.0 2.4.0.x
zend / zend_framework 1.12.0-rc2 1.12.0-rc2.x
zend / zend_framework 2.0.0-rc2 2.0.0-rc2.x
zend / zend_framework 2.2.0 2.2.0.x
zend / zend_framework 2.2.6 2.2.6.x
zend / zend_framework 2.2.10 2.2.10.x
zend / zend_framework 1.12.10 1.12.10.x
zend / zend_framework 1.12.9 1.12.9.x
zend / zend_framework 1.7.0-pl1 1.7.0-pl1.x
zend / zend_framework 1.10.2 1.10.2.x
zend / zend_framework 1.7.3 1.7.3.x
zend / zend_framework 1.11.1 1.11.1.x
zend / zend_framework 2.0.0-rc7 2.0.0-rc7.x
zend / zend_framework 2.1.3 2.1.3.x
zend / zend_framework 1.0.4 1.0.4.x
zend / zend_framework 1.0.2 1.0.2.x
zend / zend_framework 1.8.0-a1 1.8.0-a1.x
zend / zend_framework 1.7.8 1.7.8.x
zend / zend_framework 2.3.5 2.3.5.x
zend / zend_framework 1.12.13 1.12.13.x
zend / zend_framework 1.9.4 1.9.4.x
zend / zend_framework 2.1.6 2.1.6.x
zend / zend_framework 1.5.3 1.5.3.x
zend / zend_framework 2.2.5 2.2.5.x
zend / zend_framework 2.0.4 2.0.4.x
zend / zend_framework 2.3.7 2.3.7.x
zend / zend_framework 1.12.0 1.12.0.x