EUVD-2024-49239

Malicious code in bioql PyPI...

CVE-2024-48249

Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-8521

A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index of the file /qso of the component Live QSO. The manipulation of the argument manual leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48257

Wavelog 1.8.5 allows Oqrsmodel.php getworkedmodes stationid SQL injectioin...

CVE-2024-48257

Wavelog 1.8.5 allows Oqrsmodel.php getworkedmodes stationid SQL injectioin...

CVE-2024-48257

Wavelog 1.8.5 allows Oqrsmodel.php getworkedmodes stationid SQL injectioin...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48249

Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48249

Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

Wavelog 安全漏洞

Wavelog is a web-based amateur radio logging software from Wavelog Open Source. A security vulnerability exists in Wavelog version 1.8.5, which stems from an SQL injection vulnerability contained in the stationid parameter in the getworkedmodes function on the Oqrsmodel.php page...

Wavelog 安全漏洞

Wavelog is a web-based amateur radio logging software from Wavelog Open Source. A security vulnerability exists in Wavelog version 1.8.5, which stems from allowing Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48249

CVE-2024-48249 affects Wavelog version 1.8.5. The vulnerability is a SQL injection in Gridmap_model.php (get_band_confirmed) exploitable via the parameters band, sat, propagation, or mode. Public documents consistently describe the issue as a SQL injection in get_band_confirmed, without detailing...

CVE-2024-48257

Wavelog 1.8.5 allows Oqrsmodel.php getworkedmodes stationid SQL injectioin...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48257

Summary : CVE-2024-48257 affects Wavelog 1.8.5. The vulnerability is an SQL injection in the Oqrs_model.php get_worked_modes function, exploitable via the station_id parameter. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE records) with high severity per CVSS metrics, in...

CVE-2024-48251

CVE-2024-48251 affects Wavelog 1.8.5 and is due to an SQL injection in Activated_gridmap_model.php get_band_confirmed, exploitable via the band, sat, propagation, or mode parameters. Public docs report high impact to confidentiality, integrity, and availability (per CVSS metrics: CVSS:3.1/AV:N/AC...

CVE-2024-48249

Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...