Arbitrary Code Execution

contao/core is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient input validation, allowing attackers to remove or change pathconfig.php by entering a URL, making the entire Contao installation inaccessible or enabling the execution of malicious code...

PT-2024-40514 · Contao · Contao/Core

Name of the Vulnerable Software and Affected Versions: contao/core versions 2.x prior to 2.11.17 contao/core versions 3.x prior to 3.2.9 Description: The issue is related to arbitrary code execution on the server due to insufficient input validation. Attackers can exploit this by entering a...