SQL Injection

typo3/cms is vulnerable to SQL injection. The vulnerability is due to a flaw in the database escaping API when configured for MySQL passthrough mode, which affects all queries using DatabaseConnection::sqlquery, even if arguments were properly escaped with DatabaseConnection::quoteStr...

PT-2024-40219

Name of the Vulnerable Software and Affected Versions: No specific software or version information is provided. Description: A flaw in the database escaping API results in a SQL injection issue when the dbal extension is enabled and configured for MySQL passthrough mode. This affects all queries...