logo

Database

SQL injection - Code In contao/core

Description

Contao core SQL Injection Vulnerability Contao core prior to 2.11.4 has a SQL injection vulnerability in contao-2.11.3\system\modules\backend\Ajax.php

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2012-43832. NVD-2012-43833. OSV-2012-43834. GCVE-2012-4383

References

1. https://github.com/contao/core/issues/44272. https://github.com/contao/core/commit/2bf4fc380e19895127cbeaba62bff951a3b8e5cb3. http://www.openwall.com/lists/oss-security/2012/08/31/14

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.