CVE-2026-69704

نوع الضعف

Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized database operations including data deletion and extraction.

المراجع

• https://gist.github.com/arjunjaincs/8cd878b6628d587a1139febd40de9ac6
• https://github.com/maximeAmini/Atals-Livre
• https://www.vulncheck.com/advisories/atals-livre-sql-injection-via-unsanitized-get-parameter-in-supp
• https://gist.github.com/arjunjaincs/8cd878b6628d587a1139febd40de9ac6