Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-8297 EUVD-2026-45201GHSA-4339-8x9g-3w7v

SQLi in GIS Informatics' GisLab Laboratory Management System

Published Jul 17, 2026 · Updated Jul 17, 2026 · Assigned by TR-CERT

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows SQL Injection.

This issue affects GisLab Laboratory Management System: from 1.4.03 through 08072026.

Affected products

VendorProductAffectedFixed
Gis Informatics Engineering Consulting Laboratory R&D and Software Services GisLab Laboratory Management System 1.4.03 – ≤ 08072026 —

References