openDCIM SQL injection vulnerability

openDCIM is an openDCIM open source Data Center Inventory Management DCIM application. A SQL injection vulnerability exists in openDCIM version 23.04 and earlier, which stems from unused preprocessing statements and could lead to SQL injection...

CVE-2025-48701

openDCIM through 23.04 allows SQL injection in peopledepts.php because prepared statements are not used...

CVE-2025-48701

The CVE-2025-48701 entry corresponds to openDCIM before version 23.05, with a SQL injection in the people_depts.php path caused by not using prepared statements. Affected software: openDCIM 23.04 and earlier. Root cause: lack of prepared statements in a query in people_depts.php. Impact: potentia...

CVE-2025-48701

openDCIM through 23.04 allows SQL injection in peopledepts.php because prepared statements are not used...

CVE-2025-48701: Improper Neutralization of Special Elements used in an SQL Command

openDCIM through 23.04 allows SQL injection in peopledepts.php because prepared statements are not used...

CVE-2025-48701

openDCIM through 23.04 allows SQL injection in peopledepts.php because prepared statements are not used...

PT-2025-22577 · Opendcim · Opendcim

Name of the Vulnerable Software and Affected Versions: openDCIM versions prior to 23.05 Description: The issue allows SQL injection in people depts.php because prepared statements are not used. This could potentially lead to unauthorized access or manipulation of data. Recommendations: For openDC...