6 matches found
CVE-2024-48249
Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...
CVE-2024-48249
Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...
CVE-2024-48249: Improper Neutralization of Special Elements used in an SQL Command
Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...
CVE-2024-48249
Wavelog version 1.8.5 is vulnerable to SQL injection within the Gridmap_model.php file. The flaw exists in the get_band_confirmed function, where the band, sat, propagation, or mode variables are improperly neutralized during SQL command execution. This vulnerability could allow an attacker to ac...
