Vulnerabilities reported against Zend Framework, and recommendations for mitigation

• ZF2010-02: Potential XSS vector in Zend_Dojo_View_Helper_Editor
• ZF2010-01: Potential XSS vectors due to inconsistent encodings
• ZF2009-02: XSS vector in Zend_Filter_StripTags
• ZF2009-01: LFI vector in Zend_View::setScriptPath() and render()

• «
• Prev
• 1
• 2