Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GIS Informatics GisLab Laboratory Management System 1.5 Clear all filters
TI-2026-08059 CVE-2026-9166 · GHSA-h35h-27m7-j6fc

LFI in GIS Informatics' GisLab Laboratory Management System

Priority LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2026-09-10 Fixed in 1.5 CWE-22
TI-2026-08057 CVE-2026-9163 · GHSA-cg6p-375w-3c33

SQLi in GIS Informatics' GisLab Laboratory Management System

Priority MEDIUM 49

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00468 Published 2026-09-10 Fixed in 1.5 CWE-89