medium5.4
CVE-2025-48701
openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.
Impact
openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.
Affected products
| Product | Affected versions |
|---|---|
| OpenDCIM | through 23.04 |
Versions were read from the advisory text. No structured product data has been published for this record yet.