Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00468·Published 2026-09-10·Fixed in 1.5CWE-89
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00503·Published 2026-09-10·Fixed in 1.5CWE-22