Contao core SQL Injection Vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2012-4383 · ADVISORY
• contao/core · WEB
• contao/core commit 2bf4fc3 · WEB
• contao/core · PACKAGE
• openwall.com/lists/oss-security/2012/08/31/14 · WEB

Lỗ hổng khác của contao/core

• GHSA-wq43-8r5p-w3mcCAOcontao/core PHP object injection vulnerability allows for arbitrary code execution
• GHSA-wxxw-5gq6-j2g5NGHIÊM TRỌNG 9.0contao/core Insufficient input validation allows for code injection and remote execution
• CVE-2018-5478TRUNG BÌNH 6.1Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension.
• CVE-2018-10125TRUNG BÌNH 6.1Contao before 4.5.7 has XSS in the system log.
• CVE-2019-10641NGHIÊM TRỌNG 9.8Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.