CVE-2014-1860

Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities...

CVE-2014-1860

CVE-2014-1860 affects Contao CMS up to version 3.2.4, where PHP Object Injection vulnerabilities are reported. The connected zdt entry documents a code execution vulnerability in Contao 3.2.4 and earlier, linked to improper handling of user input that is unserialized, enabling potential arbitrary...