TI-2024-32333 CVE-2024-48253 · GHSA-5624-47cx-2qwc
Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.
Priority HIGH 81
Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.
Magicbug
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Magicbug records in CISA KEVNo Magicbug vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2024-30865 CVE-2024-45999 · GHSA-v5jv-g2mh-7rmh
A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the…
Priority HIGH 76
A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function located in the file /application/models/Oqrs_model.php.
TI-2024-32336 CVE-2024-48259 · GHSA-99cw-3x24-r8wh
Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.
Priority HIGH 71
Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.
TI-2025-39537 CVE-2025-64084 · GHSA-q386-hr8c-6vwg
An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier.
Priority MEDIUM 60
An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier.
TI-2024-29654 CVE-2024-44065 · GHSA-qxv4-g9hq-r87f
Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint…
Priority MEDIUM 49
Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter.
TI-2024-32334 CVE-2024-48255 · GHSA-v7q3-h4r2-3g3j
Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection.
Priority MEDIUM 48
Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection.