CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable. It involves a SQL injection risk.
CVE
CVE-2014-8089
Severity
CRITICAL
CVSS
9.8
EPSS
2.55%
Original NVD Description
SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.
Related CVEs
Other vulnerabilities affecting the same vendor(s)