CVE-2011-1939

score

<0.1

cvss

9.8

epss

3.9%

published

2019-11-26

kev added

—

first seen

2026-10-21

Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 contain a sql_injection caused by improper handling of non-ASCII-compatible encodings with PDO_MySql in PHP before 5.3.6, letting attackers execute arbitrary SQL commands, exploit requires use of affected encodings and PHP versions.