GestSup SQL Injection Vulnerability in Ticket Creation

A SQL injection vulnerability has been identified in GestSup versions through 3.2.56. This issue arises in the ticket creation feature, where user input is directly included in SQL queries without proper sanitization. As a result, an authenticated attacker could manipulate database queries, potentially leading to unauthorized access to or modification of database information, depending on their database privileges.

Impact

Exploitation of this vulnerability allows for SQL injection, which could lead to unauthorized access to or modification of database contents.

Remediation

Users are advised to update to GestSup version 3.2.59 or later, where this vulnerability has been addressed.