CVE-2026-69704
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Aug 04, 2026
Vendor
unknown
Description
Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized database operations including data deletion and extraction.