Lucene search
K

5 matches found

OSV
OSV
added 2024/05/30 1:12 p.m.9 views

GHSA-7FPJ-WC8V-9CGC Duplicate Advisory: terminal42/contao-tablelookupwizard possible SQL injection in widget field value

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v3mr-gp7j-pw5w. This link is maintained to preserve external references. Original Description Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading t...

9.8CVSS5.8AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/05/30 1:12 p.m.8 views

Duplicate Advisory: terminal42/contao-tablelookupwizard possible SQL injection in widget field value

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v3mr-gp7j-pw5w. This link is maintained to preserve external references. Original Description Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading t...

5.8AI score
Exploits0References4Affected Software1
OSV
OSV
added 2022/02/10 10:33 p.m.15 views

GHSA-V3MR-GP7J-PW5W Possible SQL injection in tablelookupwizard Contao Extension

Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading to an SQL injection possibility. Patches The issue has been patched in tablelookupwizard version 3.3.5 and version 4.0.0. For more information If you have any questions or comments...

9.8CVSS5.8AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/02/10 10:33 p.m.23 views

Possible SQL injection in tablelookupwizard Contao Extension

Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading to an SQL injection possibility. Patches The issue has been patched in tablelookupwizard version 3.3.5 and version 4.0.0. For more information If you have any questions or comments...

5.8AI score
Exploits0References4Affected Software1
Friends Of PHP
Friends Of PHP
added 2022/02/04 8:13 a.m.16 views

Possible SQL injection in widget field value

Description Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading to an SQL injection possibility. Patches The issue has been patched in tablelookupwizard version 3.3.5 and version 4.0.0. For more information If you have any questions ...

0.6AI score
Exploits0Affected Software1
Rows per page
Query Builder