NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the query_packets and insert functions.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')