CVE-2024-45999

Summary

CVE-2024-45999 is a newly discovered SQL Injection vulnerability affecting Cloudlog version 2.6.15. The issue lies within the get_station_info() function, specifically in the /application/models/Oqrs_model.php file. An attacker can exploit this vulnerability by manipulating the station_id parameter, allowing them to inject malicious SQL code and potentially gain unauthorized access to sensitive data or even take control of the affected system. This vulnerability poses a serious threat and requires immediate remediation to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.