GIS Informatics vulnerabilities

🔔 Create alert RSS

Published CVEs affecting GIS Informatics products: 2 record(s), with severity, exploitation and fixes.

GisLab Laboratory Management System 2

Exploited only (KEV) →

CVE-2026-9166 High · 7.5 CWE-22 Sep 10, 2026

LFI in GIS Informatics' GisLab Laboratory Management System

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

CVE-2026-9163 Critical · 9.8 CWE-89 Sep 10, 2026

SQLi in GIS Informatics' GisLab Laboratory Management System

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.