CVE-2015-7695: Debian Linux

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.

Affected products

• Debian Debian Linux: version 7.0 only; version 8.0 only
• Zend Zend Framework: up to and including 1.12.15

Published 2016-06-07. Last modified 2026-06-17.