OpenCode USSD Gateway security vulnerability

OpenCode USSD Gateway is an OpenCode open source gateway software for processing and managing USSD messages. A security vulnerability exists in OpenCode USSD Gateway version 6.13.11, which stems from an SQL injection in the ID parameter of the getSubUsersByProvider function...

CVE-2025-65238

The OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 is vulnerable to an incorrect access control flaw within the getSubUsersByProvider function. This security weakness allows an attacker with low-level privileges to bypass intended restrictions to dump user records and gain access to ...

CVE-2025-65235

OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 is vulnerable to a SQL injection vulnerability. The flaw exists in the getSubUsersByProvider function due to improper neutralization of special elements in the ID parameter. This vulnerability allows an attacker to interfere with databas...