CVE-2012-4383

描述

Contao core prior to 2.11.4 has a SQL injection vulnerability in `contao-2.11.3\system\modules\backend\Ajax.php`

受影響套件(1)

• Packagist/contao/corefrom 0, < 2.11.4

CVSS 分數

參考連結(5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2012-4383
• PATCHhttps://github.com/contao/core
• WEBhttps://github.com/contao/core/commit/2bf4fc380e19895127cbeaba62bff951a3b8e5cb
• WEBhttps://github.com/contao/core/issues/4427
• WEBhttp://www.openwall.com/lists/oss-security/2012/08/31/14