Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-44065 2 Cloudlog, Magicbug 2 Cloudlog, Cloudlog 2025-12-31 9.8 Critical
Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter.
CVE-2024-45999 2 Cloudlog, Magicbug 2 Cloudlog, Cloudlog 2024-11-21 6.6 Medium
A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function located in the file /application/models/Oqrs_model.php. The vulnerability is exploitable via the station_id parameter.