PT-2026-42515 · Openises+1 · Tickets

CVE-2026-48237 · Published 2026-05-21 · Updated 2026-05-21

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Open ISES Tickets versions prior to 3.44.2

Description An issue exists in the message.php file where the frm ticket id and frm resp id POST parameters are concatenated into WHERE clauses of SELECT and UPDATE statements without proper sanitization. This allows authenticated attackers to manipulate query semantics to read, modify, or delete database contents. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, allowing unauthorized access to the database.

Recommendations Update to version 3.44.2 or later. Avoid using the frm ticket id and frm resp id parameters in the message.php endpoint until the update is applied.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-48237

Affected Products

Tickets

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48237.json · Exploit
• https://github.com/openises/tickets/commit/ecfeb406a016766cae81c749e14b5145a9f2dbff · Patch
• https://osv.dev/vulnerability/CVE-2026-48237 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48237 · Security Note
• https://github.com/openises/tickets/releases/tag/v3.44.2 · Note
• https://vulncheck.com/advisories/open-ises-tickets-sql-injection-via-message-php-frm-ticket-id-and-frm-resp-id-parameters · Note