CVE-2026-69704

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-69704

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-69704.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-69704

Published

2026-08-04T18:47:05Z

Modified

2026-10-26T02:30:25Z

Severity

7.0 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

Atals-Livre SQL Injection via Unsanitized GET Parameter in supp()

Details

Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized database operations including data deletion and extraction.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-89"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/69xxx/CVE-2026-69704.json"
}

References

Affected packages

Git / github.com/maximeamini/atals-livre

Affected ranges

Type

GIT

Repo

https://github.com/maximeamini/atals-livre

Events

Introduced

Last Affected

de0893f

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "de0893f"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-69704.json"