PT-2026-26928

Name of the Vulnerable Software and Affected Versions ownDMS version 4.7 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter. This is achieved by sending GET requests to the endpoints 'pdfstream.php',...