CVE-2011-1939: Debian Linux

Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.

Affected products

• Debian Debian Linux: version 8.0 only
• PHP PHP: before 5.3.6 (fixed in 5.3.6)
• Zend Zend Framework: from 1.10.0, before 1.10.9 (fixed in 1.10.9); from 1.11.0, before 1.11.6 (fixed in 1.11.6)

Published 2019-11-26. Last modified 2026-06-16.