CVE-2024-31556

An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function...

CVE-2024-31556

Reportico Web versions prior to v.8.1.0 are vulnerable to an issue in the sessionid function. This flaw allows a local attacker to execute arbitrary code and access sensitive information . Additionally, documentation reveals that the application fails to properly invalidate session cookies upon l...

CVE-2024-31556

An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function...

CVE-2024-31556: Improper Privilege Management

An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function...

PT-2024-24139 · Unknown · Reportico Web

Name of the Vulnerable Software and Affected Versions: Reportico Web versions prior to 8.1.0 Description: The issue allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function. This vulnerability arises from the failure of the web application to...

Directory Traversal

reportico-web/reportico is vulnerable to directory traversal attacks. Using the xmlin parameter and .. attackers can read files outside of the intended directory...