The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting maliciou…

The Open ISES Project version 3.30A contains a critical SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries through the p1 parameter in sever_graph.php. Attackers can send crafted GET requests with malicious SQL payloads to extract sensitive database information including schema names and other data. This vulnerability poses a significant risk as it requires no authentication and can lead to complete database compromise.