23 matches found
CVE-2024-48259
Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...
CVE-2024-48253
Cloudlog 2.6.15 allows Oqrs.php deleteoqrsline id SQL injection...
CVE-2024-48255
Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...
CVE-2024-48259
Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...
CVE-2024-48253
Cloudlog 2.6.15 allows Oqrs.php deleteoqrsline id SQL injection...
CVE-2024-48255
Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...
CVE-2024-48253
Cloudlog 2.6.15 allows Oqrs.php deleteoqrsline id SQL injection...
CVE-2024-48259
Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...
PT-2024-33058
Name of the Vulnerable Software and Affected Versions Cloudlog version 2.6.15 Description The issue is related to an SQL injection vulnerability in the Oqrs.php file, specifically through the delete oqrs line id parameter. This vulnerability allows for SQL injection attacks. Recommendations For...
CVE-2024-48255
CVE-2024-48255 affects Cloudlog 2.6.15, where the Oqrs.php get_station_info endpoint is vulnerable to SQL injection via the station_id parameter. The issue enables unauthenticated network-level access with potential impact on confidentiality, integrity, and availability as indicated by the CVSS m...
CVE-2024-48259
Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...
CVE-2024-48255
Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...
CVE-2024-48255
Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...
PT-2024-33061
Name of the Vulnerable Software and Affected Versions Cloudlog version 2.6.15 Description The issue concerns an SQL injection vulnerability in Cloudlog's Oqrs.php request form, which can be exploited via the station id or callsign variables. This vulnerability allows attackers to manipulate the S...
CVE-2024-48253
Cloudlog 2.6.15 allows Oqrs.php deleteoqrsline id SQL injection...
CVE-2024-48253
Cloudlog 2.6.15 allows Oqrs.php deleteoqrsline id SQL injection...
CVE-2024-48255
Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...
CVE-2024-48259
Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...
CVE-2024-48259
The self-hosted PHP application Cloudlog version 2.6.15 is vulnerable to SQL injection due to unsanitized input in the Oqrs.php page's request_form function. Attackers can execute arbitrary SQL commands by sending a crafted request using the station_id or callsign parameters. This could lead to u...
