← Database

CVE-2026-8297

CRITICAL CVSS: 9.8 Published: 2026-07-17 Modified: 2026-07-17

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 through 08072026.

Affected Platforms

Unknown

Weakness Type

CWE-89

References