CVE-2024-48249

概要

参考情報

• chiggerlor.substack.com/p/unauthenticated-sql-injection-in · Exploit
• wavelog/wavelog commit 0bf2675 · Patch
• wavelog.org · Product

wavelog のその他の脆弱性

• CVE-2024-48257緊急 9.8Wavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL injectioin.
• CVE-2024-48251緊急 9.8Wavelog 1.8.5 allows Activated_gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode.
• CVE-2024-8521中 6.1A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index of the file /qso of t…