https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:29:00.380491+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341762 EUVD-2026-341762 2026-10-07T21:29:00.382681+00:00 EUVD-2026-341762 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48240 fkie_cve-2026-48240 2026-10-07T21:29:00.382711+00:00

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/statistics.php where the tick_id and f_tick_id POST parameters are concatenated into WHERE clauses of SELECT statements in the statistics rollup queries without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

 https://cve.radiocsirt.org/vuln/ghsa-64mc-q5rh-6vmq GHSA-64mc-q5rh-6vmq 2026-10-07T21:29:00.382742+00:00

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/statistics.php where the tick_id and f_tick_id POST parameters are concatenated into WHERE clauses of SELECT statements in the statistics rollup queries without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.