CVE-2024-44065

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2025-12-26

Last modified

2026-10-27

Weaknesses

CWE-89

Affected products

• Cloudlog (Magicbug)

References

• https://github.com/magicbug/Cloudlog
• https://github.com/jacopo1223/jacopo.github/tree/main/CVE-2024-44065