Description
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module.
Remediation
References
Related Vulnerabilities
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder SQL Injection (1.29.2)
PHP Other Vulnerability (CVE-2007-1890)
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2017-5660)
MySQL CVE-2015-4866 Vulnerability (CVE-2015-4866)
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Cross-Site Scripting (1.2.05.20)