CVE-2026-70370

Summary

The flaw allows an attacker to inject SQL commands by manipulating the Line and Column parameters, leading to potential data manipulation or system compromise.

Exploitability

Exploitation requires control over the Line and Column parameters, which can be achieved through a web interface. The difficulty depends on the attacker's ability to manipulate these parameters.

Blast radius

If exploited, the attacker could gain full control over the database, leading to data theft, corruption, or denial of service.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected feature or restrict access to the catalogue_stats.pl endpoint.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.