https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T06:26:11.766074+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-48231 fkie_cve-2026-48231 2026-10-17T06:26:11.767267+00:00

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in tables.php where the multiple POST parameters (tablename, indexname, sortby) are concatenated into table/column identifiers in dynamically constructed SELECT/UPDATE/DELETE statements without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

 https://db.gcve.eu/vuln/ghsa-jh65-7v5m-mh3v GHSA-jh65-7v5m-mh3v 2026-10-17T06:26:11.767350+00:00

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in tables.php where the multiple POST parameters (tablename, indexname, sortby) are concatenated into table/column identifiers in dynamically constructed SELECT/UPDATE/DELETE statements without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.