CVE-2026-69704: Atals-Livre SQL Injection via Unsanitized GET Parameter in supp()
Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized database operations including data deletion and extraction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-69704?
The severity of CVE-2026-69704 is medium, rated at 6.5.
How do I fix CVE-2026-69704?
To fix CVE-2026-69704, sanitize and validate all input for the GET parameters in the supp() function to prevent SQL injection.
What types of attacks are possible with CVE-2026-69704?
CVE-2026-69704 allows attackers to perform SQL injection attacks, potentially leading to unauthorized data manipulation.
Which software is affected by CVE-2026-69704?
The Atals-Livre software is affected by CVE-2026-69704.
What is the impact of exploiting CVE-2026-69704?
Exploiting CVE-2026-69704 can result in unauthorized data modification or deletion, as it allows attackers to manipulate database queries.