CVE-2025-64084

An authenticated SQL injection vulnerability exists in Cloudlog versions 2.7.5 and earlier. The vucc_details_ajax function in application/controllers/Awards.php fails to properly sanitize the user-supplied Gridsquare POST parameter. A remote, authenticated attacker can inject a malicious payload ...