SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to r…CVE-2016-4861Zend · 4.1% likely

   CWE-89

2. The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.CVE-2015-7695Zend · 2.9% likely

   CWE-89

3. SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute ar…CVE-2014-8089Zend · 2.5% likely

   CWE-89

4. The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle parentheses, which allows remote attackers to conduct SQL injection attacks via unspeci…CVE-2014-4914Zend · 2.3% likely

   CWE-89

5. The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors related to use…CVE-2016-6233Zend · 2.0% likely

   CWE-89

6. Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.CVE-2015-0270Zend · 1.1% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.