CVE-2026-69704 — Atals-Livre SQL Injection via Unsanitized GET Parameter in supp()
Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deleti…
Published: 2026-08-04 · CVSS: 7.0 · CVSS 4.0
Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized database operations including data deletion and extraction.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7