CyberRota Analysis
AI-GeneratedAn SQL injection vulnerability exists in the del_check parameter of the /ocsreports/?function=save_query_list endpoint, allowing authenticated users with operator privileges to manipulate SQL queries due to inadequate input validation. This could lead to unauthorized data extraction from the database, posing a significant risk to data integrity and confidentiality. Organizations utilizing this endpoint should prioritize remediation to mitigate potential data breaches.
Original NVD Description
SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and information to be extracted from the database using SQL injection techniques.