CVE-2025-48701

openDCIM through 23.04 allows SQL injection in peopledepts.php because prepared statements are not used...