The Open ISES Project version 3.30A contains a critical SQL injection vulnerability in the add_facnote.php file. Unauthenticated attackers can exploit this vulnerability by injecting malicious SQL code through the ticket_id parameter via GET requests. The vulnerability allows attackers to execute arbitrary SQL queries and extract sensitive database information including version details and other confidential data. This represents a significant security risk as it requires no authentication and can lead to complete database compromise.