Ceylan Bozoğullarindan

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

**Name of the Vulnerable Software and Affected Versions** Iron Mountain Archiving Services Inc. EnVision versions prior to 250563 **Description** The software contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') issue. This allows for Command Injection. **Recommendations** Update to version 250563 or later.