CVE-2012-4383 — SQL Injection in Contao

CWE-89 — SQL Injection4 documents4 sources
Severity
8.8HIGHNVD
EPSS
0.3%
top 50.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
ContaoContao Core
Timeline
PublishedJan 29
Latest updateApr 23

Description

contao prior to 2.11.4 has a sql injection vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

▶Packagistcontao/core< 2.11.4
▶NVDcontao/contao< 2.11.4
▶CVEListV5contao/contaoprior to 2.11

Patches

Patch: www.openwall.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

3
OSV
Contao core SQL Injection Vulnerability↗2022-04-23
▶
GHSA
Contao core SQL Injection Vulnerability↗2022-04-23
▶
CVEList
CVE-2012-4383: contao prior to 2↗2020-01-29
▶
CVE-2012-4383 — SQL Injection in Contao | cvebase