CVE-2024-44065
Critical · 9.8CVSS
9.8
EPSS
0.4%
Published
Dec 26, 2025
CISA due date
—
The record
Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|