Vulnerabilities > Magicbug

DATE CVE VULNERABILITY TITLE RISK
2024-10-14 CVE-2024-48253 SQL Injection vulnerability in Magicbug Cloudlog 2.6.15
Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.
network
low complexity
magicbug CWE-89
critical
 9.8
9.8
2024-10-14 CVE-2024-48255 SQL Injection vulnerability in Magicbug Cloudlog 2.6.15
Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection.
network
low complexity
magicbug CWE-89
critical
 9.8
9.8
2024-10-01 CVE-2024-45999 SQL Injection vulnerability in Magicbug Cloudlog
A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function located in the file /application/models/Oqrs_model.php.
network
low complexity
magicbug CWE-89
critical
 9.8
9.8