CVE-2026-69704

MEDIUM 6.5

Atals-Livre SQL Injection via Unsanitized GET Parameter in supp()

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized database operations including data deletion and extraction.

CWE	CWE-89
Vendor	maximeamini
Product	atals-livre
Published	Aug 4, 2026

Stay Ahead of the Next One

Get instant alerts for maximeamini atals-livre

Be the first to know when new medium vulnerabilities affecting maximeamini atals-livre are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Affected Versions

maximeAmini / Atals-Livre

0 ≤ de0893f

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/maximeAmini/Atals-Livre gist.github.com: https://gist.github.com/arjunjaincs/8cd878b6628d587a1139febd40de9ac6 vulncheck.com: https://www.vulncheck.com/advisories/atals-livre-sql-injection-via-unsanitized-get-parameter-in-supp

Credits

🔍 Arjun Jain