CVE-2024-48255

Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...

CVE-2024-48255

Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...

CVE-2024-48255

Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...

CVE-2024-48259: Improper Neutralization of Special Elements used in an SQL Command

Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...

Cloudlog 安全漏洞

Cloudlog is a self-hosted PHP application by the individual developer Peter Goodhall. Allows logging of amateur radio contacts from anywhere. A security vulnerability exists in Cloudlog version 2.6.15 that stems from allowing SQL injection via the id parameter of oqrs.php deleteoqrsline...

CVE-2024-48253

Cloudlog 2.6.15 allows Oqrs.php deleteoqrsline id SQL injection...

CVE-2024-48259

Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...

CVE-2024-48259

The self-hosted PHP application Cloudlog version 2.6.15 is vulnerable to SQL injection due to unsanitized input in the Oqrs.php page's request_form function. Attackers can execute arbitrary SQL commands by sending a crafted request using the station_id or callsign parameters. This could lead to u...

CVE-2024-48259

Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...

PT-2024-33059

Name of the Vulnerable Software and Affected Versions Cloudlog version 2.6.15 Description The issue is related to a SQL injection vulnerability in the Oqrs.php endpoint, specifically affecting the get station info function when the station id parameter is used. This vulnerability can be exploited...

Cloudlog 安全漏洞

Cloudlog is a self-hosted PHP application by the individual developer Peter Goodhall. Allows logging of amateur radio contacts from anywhere. A security vulnerability exists in Cloudlog version 2.6.15 that stems from allowing SQL injection via the stationid parameter of Oqrs.php getstationinfo...

CVE-2024-45999

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the getstationinfofunction located in the file /application/models/Oqrsmodel.php. The vulnerability is exploitable via the stationid parameter...

CVE-2024-45999

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the getstationinfofunction located in the file /application/models/Oqrsmodel.php. The vulnerability is exploitable via the stationid parameter...

Cloudlog SQL注入漏洞

Cloudlog is a self-hosted PHP application by the individual developer Peter Goodhall. Allows logging of amateur radio contacts from anywhere. Cloudlog version 2.6.15 suffers from a SQL injection vulnerability that stems from vulnerability to SQL injection attacks...

CVE-2024-45999

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the getstationinfofunction located in the file /application/models/Oqrsmodel.php. The vulnerability is exploitable via the stationid parameter...

CVE-2024-45999

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the getstationinfofunction located in the file /application/models/Oqrsmodel.php. The vulnerability is exploitable via the stationid parameter...

CVE-2024-45999: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the getstationinfofunction located in the file /application/models/Oqrsmodel.php. The vulnerability is exploitable via the stationid parameter...

CVE-2024-45999

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the getstationinfofunction located in the file /application/models/Oqrsmodel.php. The vulnerability is exploitable via the stationid parameter...

PT-2024-31877 · Cloudlog · Cloudlog

Name of the Vulnerable Software and Affected Versions: Cloudlog version 2.6.15 Description: A SQL Injection issue was discovered, specifically within the get station info function located in the file /application/models/Oqrs model.php. The issue is exploitable via the station id parameter. This...

CVE-2024-45999

Cloudlog 2.6.15 contains a SQL injection vulnerability in get_station_info() within /application/models/Oqrs_model.php, exploitable via the station_id parameter. Sources across Red Hat, NVD, OSV, CNNVD, and other feeds confirm the issue. The vulnerability is a SQL injection, enabling potential un...