CVE-2024-45999
A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function located in the file /application/m...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function located in the file /application/models/Oqrs_model.php. The vulnerability is exploitable via the station_id parameter.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web chiggerlor.substack.com