Vulnerabilities (CVE)

Filtered by vendor Contao Subscribe
Filtered by product Contao
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-26265 1 Contao 1 Contao 2023-08-08 7.5 HIGH 9.8 CRITICAL
Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter.
CVE-2019-11512 1 Contao 1 Contao 2019-07-10 7.5 HIGH 9.8 CRITICAL
Contao 4.x allows SQL Injection. Fixed in Contao 4.4.39 and Contao 4.7.5.