TYPO3 SQL Injection in dbal

A flaw in the database escaping API results in a SQL injection vulnerability when extension dbal is enabled and configured for MySQL passthrough mode in its extension configuration. All queries which use the DatabaseConnection::sqlquery are vulnerable, even if arguments were properly escaped with...

GHSA-9895-53FC-98V2 TYPO3 SQL Injection in dbal

A flaw in the database escaping API results in a SQL injection vulnerability when extension dbal is enabled and configured for MySQL passthrough mode in its extension configuration. All queries which use the DatabaseConnection::sqlquery are vulnerable, even if arguments were properly escaped with...

PT-2024-40219

Name of the Vulnerable Software and Affected Versions: No specific software or version information is provided. Description: A flaw in the database escaping API results in a SQL injection issue when the dbal extension is enabled and configured for MySQL passthrough mode. This affects all queries...