ZF2016-03: Potential SQL injection in ORDER and GROUP functions

September 8, 2016

The implementation of ORDER BY and GROUP BY in Zend_Db_Select is prone to SQL injection when a combination of SQL expressions and comments are used.

References

framework.zend.com/security/advisory/ZF2016-03

Code Behaviors & Features

Detect and mitigate ZF2016-03 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →