An authenticated SQL injection vulnerability in Open ISES Tickets allows attackers to manipulate database queries and potentially access sensitive information.

The application fails to properly sanitize input in the 'sort' and 'dir' parameters within the portal-ajax-list-requests.php file, resulting in an SQL injection vulnerability (CWE-89). This requires the attacker to have low-level authenticated access to the application.

Successful exploitation of this SQL injection vulnerability could allow an authenticated user to extract sensitive data from the database or modify records. While the impact is limited by the requirement for authentication, the ability to perform unauthorized database operations compromises the integrity and confidentiality of the system. The CVSS score of 7.1 reflects the serious nature of this flaw.

Immediate Action: Update Open ISES Tickets to version 3.44.2 or later to implement proper input sanitization.

Proactive Monitoring: Monitor application logs for SQL syntax errors or anomalous database query patterns associated with the affected AJAX script.

Compensating Controls: Utilize a Web Application Firewall (WAF) with SQL injection protection rules to filter malicious input directed at the vulnerable script parameters.

Public Exploit Available: Unknown

Organizations should update their instances to version 3.44.2 as soon as possible. Although authentication is required, the potential for unauthorized data access makes this a priority for remediation to prevent abuse by malicious insiders or compromised user accounts.