CVE Details: CVE-2024-48251

Description

Wavelog 1.8.5 allows Activated_gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode.

Published Date: 2024-10-14
Last Modified Date: 2024-10-16
Severity: CRITICAL
CVSS v3 Score: 9.8
CWE ID: CWE-89
Attack Vector: NETWORK
Attack Complexity: LOW
Privileges Required: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality Impact: HIGH
Integrity Impact: HIGH
Availability Impact: HIGH

Back to CVE List