CVE-2024-44065

Critical

Published: 26/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter.

An attacker can manipulate SQL queries, potentially leading to unauthorized data access or integrity compromise of the database.

Update Cloudlog to the latest version or apply security patches, and validate input data.

Original NVD description (English source)

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter.