CVE-2024-48259

Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...

CVE-2024-48259

Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...

CVE-2024-48253

Cloudlog 2.6.15 allows Oqrs.php deleteoqrsline id SQL injection...

CVE-2024-48253

Cloudlog 2.6.15 allows Oqrs.php deleteoqrsline id SQL injection...

CVE-2024-48255

Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...

CVE-2024-48255

Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...

PT-2024-33061 · Cloudlog · Cloudlog

Name of the Vulnerable Software and Affected Versions: Cloudlog version 2.6.15 Description: The issue concerns an SQL injection vulnerability in Cloudlog's Oqrs.php request form, which can be exploited via the station id or callsign variables. This vulnerability allows attackers to manipulate the...

CVE-2024-48259

Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...

CVE-2024-48255

Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...

CVE-2024-48253

Cloudlog 2.6.15 allows Oqrs.php deleteoqrsline id SQL injection...

CVE-2024-48259

Cloudlog 2.6.15 allows Oqrs.php requestform SQL injection via stationid or callsign...

CVE-2024-48253

Cloudlog 2.6.15 allows Oqrs.php deleteoqrsline id SQL injection...

CVE-2024-48259

Cloudlog 2.6.15 is vulnerable to an SQL injection in Oqrs.php request_form via station_id or callsign. The root cause is an unsafe handling of input in the Oqrs.php endpoint, enabling crafted queries. Impact is disclosed as SQL injection with potential data exposure or modification; no explicit e...

CVE-2024-48255

Cloudlog 2.6.15 allows Oqrs.php getstationinfo stationid SQL injection...

CVE-2024-48255

CVE-2024-48255 affects Cloudlog 2.6.15, where the Oqrs.php get_station_info endpoint is vulnerable to SQL injection via the station_id parameter. The issue enables unauthenticated network-level access with potential impact on confidentiality, integrity, and availability as indicated by the CVSS m...