CVE-2024-48255

Description

References

• chiggerlor.substack.com/p/unauthenticated-sql-injection-in-9a3 · Third Party Advisory
• magicbug/Cloudlog · Third Party Advisory
• magicbug.co.uk/cloudlog · Product

Altre vulnerabilità di cloudlog

• CVE-2024-44065CRITICO 9.8Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults paramet…
• CVE-2025-64084MEDIO 5.4An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier. The vucc_details_ajax function in application/controllers…
• CVE-2024-48259ALTO 7.3Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.
• CVE-2024-48253CRITICO 9.8Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.
• CVE-2024-45999CRITICO 9.8A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function located in the file /app…