Full title: Zend Framework 2.4.2 / 1.12.13 XXE Injection Vulnerability Category: web applications Platform: php Zend Framework versions 2.4.2 and below and 1.12.13 and below suffer from an XML external entity injection vulnerability. # 0day.today @ http://0day.today/