NetSight
critical9.8

CVE-2019-11512

Contao 4.x allows SQL Injection.

Impact

Contao 4.x allows SQL Injection. Fixed in Contao 4.4.39 and Contao 4.7.5.

Affected products

VendorProductAffected versions
ContaoContao
from 4.0.0 before 4.4.39
from 4.5.0 before 4.7.5

Weakness classification

References