Skip to content
Heist/ feed
Back to feed
High

Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters

Type: advisorySources: OSV

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in message.php where the frm_ticket_id and frm_resp_id POST parameters are concatenated into WHERE clauses of SELECT/UPDATE statements without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-48237
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 02:47 UTC · Revision 1

Source evidence

Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters

core-osv · Original source

Published 21 May 2026, 17:10 UTC

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in message.php where the frm_ticket_id and frm_resp_id POST parameters are concatenated into WHERE clauses of SELECT/UPDATE statements without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

osv:CVE-2026-48237
Complete source record
{
  "id": "0330d515de66dd90866a74347ef520f78e324cf80f771a6664d345ce6efbb6a4",
  "url": "https://osv.dev/vulnerability/CVE-2026-48237",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters",
    "summary": "Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in message.php where the frm_ticket_id and frm_resp_id POST parameters are concatenated into WHERE clauses of SELECT/UPDATE statements without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.",
    "evidence": "osv:CVE-2026-48237",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-48237",
      "aliases": [
        "CVE-2026-48237"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/openises/tickets",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "1e3a89b17599ed2229e9258ca70f05a6a8b13dd0"
                },
                {
                  "fixed": "ecfeb406a016766cae81c749e14b5145a9f2dbff"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "3.44.2"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                  },
                  {
                    "range": [
                      {
                        "fixed": "1e3a89b17599ed2229e9258ca70f05a6a8b13dd0"
                      }
                    ],
                    "source": "REFERENCES_TAG",
                    "original_tag": "v3.44.2"
                  },
                  {
                    "range": [
                      {
                        "fixed": "ecfeb406a016766cae81c749e14b5145a9f2dbff"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v3.44.1",
            "v3.44.0",
            "v3.42.0",
            "v3.41.0",
            "v3.40.3",
            "v3.40.2",
            "v3.40.1",
            "v3.40.0-beta",
            "v3.30.2-beta",
            "v3.30.1-beta",
            "v3.24.1-beta",
            "v3.23.1-beta",
            "v3.22.1-beta",
            "v3.21.1-beta",
            "v3.20.1-beta",
            "v3.12.1-beta",
            "v3.11.1-beta",
            "v3.10.1-beta",
            "v3.9.1-beta",
            "v3.8.1-beta",
            "v2.40.3-beta",
            "v2.40.1-beta",
            "v2.30.3-beta",
            "v2.30.1-beta",
            "v2.20.7-beta",
            "v2.20.6-beta",
            "v2.20.5-beta",
            "v2.20.4-beta",
            "v2.20.3-beta",
            "v2.11.3-beta",
            "v2.11.2-beta",
            "v2.10.7-beta.hotfix",
            "v2.10.7-beta",
            "v2.10.6-beta",
            "v2.10.5-beta.hotfix",
            "v2.10.5-beta",
            "v2.10.4-beta",
            "v2.9.1-beta",
            "v2.9.0-beta",
            "v2.8.2-beta",
            "v2.7.4-beta",
            "v2.6.3-beta",
            "v2.6.1-beta.hotfix",
            "v2.6.1-beta",
            "v2.6.0-beta",
            "v2.5.0-beta",
            "v2.4.1-beta",
            "v2.4.0-beta"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-48237.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:25.508382219Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48237.json",
        "https://github.com/openises/tickets/releases/tag/v3.44.2",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-48237",
        "https://www.vulncheck.com/advisories/open-ises-tickets-sql-injection-via-message-php-frm-ticket-id-and-frm-resp-id-parameters",
        "https://github.com/openises/tickets/commit/ecfeb406a016766cae81c749e14b5145a9f2dbff"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-89"
        ],
        "cna_assigner": "VulnCheck",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48237.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-48237",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 491971,
  "published_at": "2026-05-21T17:10:42.863+00:00"
}