Description
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module.
Remediation
References
Related Vulnerabilities
WordPress Plugin Slimstat Analytics PHP Object Injection (4.7)
WordPress Other Vulnerability (CVE-2005-4463)
Oracle HTTP Server Missing Authorization Vulnerability (CVE-2025-21498)
TYPO3 Use of Insufficiently Random Values Vulnerability (CVE-2010-3666)
Oracle Database Server CVE-2010-0860 Vulnerability (CVE-2010-0860)