Skip to content
OpenAdvisories

Package · Packagist

contao/core

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High —
    GHSA-wq43-8r5p-w3mc

    contao/core PHP object injection vulnerability allows for arbitrary code execution

    PHP object injection vulnerability was identified in contao/core due to untrusted data being passed to `deserialize()` function.

    contao/core Packagist
  • High 8.8
    CVE-2012-4383

    Contao core SQL Injection Vulnerability

    contao prior to 2.11.4 has a sql injection vulnerability

    contao contao contao/core Packagist
  • High 8.8
    CVE-2017-10993

    Contao Core directory traversal vulnerability

    Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal.

    contao/core-bundle contao/contao contao/core Packagist