cvedb.io
CVE-2024-45999
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2024-10-01T20:15:05.390 · Last modified 2026-06-17T07:55:06.967

Summary

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function located in the file /application/models/Oqrs_model.php. The vulnerability is exploitable via the station_id parameter.

Affected products

magicbug — cloudlog

Does this affect you?

Add your gear to cvedb and we'll alert you only when magicbug ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.