WS-2022-0065

In terminal42/contao-tablelookupwizard before 3.3.5 there is a Possible SQL injection in widget field value...

GHSA-7FPJ-WC8V-9CGC Duplicate Advisory: terminal42/contao-tablelookupwizard possible SQL injection in widget field value

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v3mr-gp7j-pw5w. This link is maintained to preserve external references. Original Description Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading t...

Duplicate Advisory: terminal42/contao-tablelookupwizard possible SQL injection in widget field value

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v3mr-gp7j-pw5w. This link is maintained to preserve external references. Original Description Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading t...

Possible SQL injection in tablelookupwizard Contao Extension

Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading to an SQL injection possibility. Patches The issue has been patched in tablelookupwizard version 3.3.5 and version 4.0.0. For more information If you have any questions or comments...

GHSA-V3MR-GP7J-PW5W Possible SQL injection in tablelookupwizard Contao Extension

Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading to an SQL injection possibility. Patches The issue has been patched in tablelookupwizard version 3.3.5 and version 4.0.0. For more information If you have any questions or comments...

PT-2022-28280

Name of the Vulnerable Software and Affected Versions tablelookupwizard versions prior to 3.3.5 tablelookupwizard versions prior to 4.0.0 Description The issue is related to the sanitization of widget values before they are passed to the database, which leads to a possibility of SQL injection...

Possible SQL injection in widget field value

Description Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading to an SQL injection possibility. Patches The issue has been patched in tablelookupwizard version 3.3.5 and version 4.0.0. For more information If you have any questions ...