GestSup SQL Injection Vulnerability in Search Bar

A SQL injection vulnerability has been identified in GestSup versions through 3.2.56. This issue arises in the search bar functionality, where user-controlled input is directly included in SQL queries without proper sanitization. As a result, an authenticated attacker could manipulate database queries, potentially leading to unauthorized access to or modification of database contents, depending on their database privileges.

Impact

Exploitation of this vulnerability allows for SQL injection, which could lead to unauthorized access to or modification of database contents.

Remediation

Users are advised to update to GestSup version 3.2.57 or later, where this vulnerability has been addressed.