Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://chiggerlor.substack.com/p/unauthenticated-sql-injection-in-9a3 | Exploit Third Party Advisory |
| https://github.com/magicbug/Cloudlog | Product |
| https://www.magicbug.co.uk/cloudlog/ | Product |
Configurations
History
02 May 2025, 19:51
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Magicbug
Magicbug cloudlog |
|
| CPE | cpe:2.3:a:magicbug:cloudlog:2.6.15:*:*:*:*:*:*:* | |
| References | () https://chiggerlor.substack.com/p/unauthenticated-sql-injection-in-9a3 - Exploit, Third Party Advisory | |
| References | () https://github.com/magicbug/Cloudlog - Product | |
| References | () https://www.magicbug.co.uk/cloudlog/ - Product |
14 Oct 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-14 15:15
Updated : 2025-05-02 19:51
NVD link : CVE-2024-48259
Mitre link : CVE-2024-48259
JSON object : View
Products Affected
magicbug
- cloudlog
CWE
No CWE.