CVE-2026-69704

Atals-Livre SQL Injection via Unsanitized GET Parameter in supp()

7.0 High

Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized database operations including data deletion and extraction.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: High

Exploit likelihood

0.33%Up 0.1 points since Aug 5, 2026

What each source reports

CVE List Score used 7.0

Atals-Livre SQL Injection via Unsanitized GET Parameter in supp()

Record: CVE-2026-69704
CVSS 4.0: 7.0 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness: CWE-89
Updated: 2026-11-02

EUVDEUVD-2026-52868 7.0

Record: EUVD-2026-52868
CVSS 4.0: 7.0 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-w8hf-r35f-2h3j 7.0

Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database...

Record: GHSA-w8hf-r35f-2h3j
CVSS 4.0: 7.0 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness: CWE-89
Updated: 2026-11-02

NVD 7.0

Record: CVE-2026-69704
CVSS 4.0: 7.0 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness: CWE-89
Updated: 2026-11-02

OSV 7.0

Atals-Livre SQL Injection via Unsanitized GET Parameter in supp()

Record: CVE-2026-69704
CVSS 4.0: 7.0 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness: CWE-89
Updated: 2026-11-02

Affected products

maximeamini atals-livre

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-69704 is a high vulnerability (CVSS 7.0) in Maximeamini Atals-livre, published August 4, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.