CVE-2018-25399

CVE-2018-25399 affects Open ISES Project 3.30A. The vulnerability is an SQL injection in nearby.php where unsafely constructed SQL queries occur via the tick_lat and tick_lng parameters, enabling unauthenticated attackers to send crafted GET requests to extract sensitive data (usernames, database...

PT-2026-44877

Name of the Vulnerable Software and Affected Versions Open ISES Project version 3.30A Description An SQL injection issue allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by injecting malicious code into the tick lat and tick lng parameters via GET requests sent ...