CPE
An SQL injection vulnerability in GIS Informatics GisLab Laboratory Management System (versions 1.4.03 to <1.5) allows unauthenticated attackers to execute arbitrary SQL commands against the backend database.