CVE Details: CVE-2024-48257

Description

Wavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL injectioin.

Published Date: 2024-10-14
Last Modified Date: 2024-10-16
Severity: CRITICAL
CVSS v3 Score: 9.8
CWE ID: CWE-89
Attack Vector: NETWORK
Attack Complexity: LOW
Privileges Required: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality Impact: HIGH
Integrity Impact: HIGH
Availability Impact: HIGH

Back to CVE List