Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-9163 EUVD-2026-75405GHSA-cg6p-375w-3c33

SQLi in GIS Informatics' GisLab Laboratory Management System

Published Sep 10, 2026 · Updated Sep 10, 2026 · Assigned by TR-CERT

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection.

This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

Affected products

VendorProductAffectedFixed
GIS Informatics GisLab Laboratory Management System 1.4.03 – < 1.5 1.5

References