PT-2026-77232

Name of the Vulnerable Software and Affected Versions reportico-web versions prior to 8.1.1 Description An incorrect access control issue allows an unauthenticated attacker to inject arbitrary PHP code into the PreExecuteCode attribute of any report. This occurs regardless of the safe mode settin...