Description
openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| openDCIM | openDCIM | ≤ 23.04 | — |
Medium · 5.4
CVE-2025-48701
EUVD-2025-28242GHSA-g2x5-hh22-qjw5
openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.
Published May 23, 2025 · Updated May 23, 2025 · Assigned by mitre