Vulnerabilities

TI-2024-29654 CVE-2024-44065 · GHSA-qxv4-g9hq-r87f

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint…

MEDIUM 49

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00384 Published 2025-12-26 No fix listed CWE-89

TI-2025-39537 CVE-2025-64084 · GHSA-q386-hr8c-6vwg

An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier.

MEDIUM 60

An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00326 Published 2025-11-14 No fix listed CWE-89

TI-2024-32336 CVE-2024-48259 · GHSA-99cw-3x24-r8wh

Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.

HIGH 71

Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00899 Published 2024-10-14 No fix listed CWE-89

TI-2024-32334 CVE-2024-48255 · GHSA-v7q3-h4r2-3g3j

Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection.

MEDIUM 48

Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00444 Published 2024-10-14 No fix listed CWE-89

TI-2024-32333 CVE-2024-48253 · GHSA-5624-47cx-2qwc

Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.

HIGH 81

Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00444 Published 2024-10-14 No fix listed CWE-89

TI-2024-30865 CVE-2024-45999 · GHSA-v5jv-g2mh-7rmh

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the…

HIGH 76

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function located in the file /application/models/Oqrs_model.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00361 Published 2024-10-01 No fix listed CWE-89

Vulnerabilities

Filters

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint…

An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier.

Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.

Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection.

Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the…