VULNERABILITY INTELLIGENCE
CVE-2026-69704
CVSS score6.5 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-08-04
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Description
Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized database operations including data deletion and extraction.
Weakness classification
- disclosure@vulncheck.com: CWE-89