PT-2024-13656 · Reportico · Reportico

Name of the Vulnerable Software and Affected Versions: Reportico versions prior to 8.1.0 Description: An issue in Reportico allows attackers to obtain sensitive information via the execute mode parameter of the URL. Recommendations: For versions prior to 8.1.0, update to version 8.1.0 or later to...

CVE-2023-48865

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...

CVE-2023-48865

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...

CVE-2023-48865

CVE-2023-48865 affects Reportico Till 8.1.0 and earlier versions with an issue in handling the execute_mode URL parameter, enabling information disclosure. Root cause: improper processing of execute_mode allows access to sensitive data. Affected: Reportico web interface (Till 8.1.0 and prior to 8...

SQL Injection

Reportico is vulnerable to SQL Injection. The vulnerability is due to improper input validation in the project parameter, allowing attackers to inject SQL queries and obtain sensitive information or other system information...

SQL Injection vulnerability in Reportico Till

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

GHSA-JJF4-959W-F545 SQL Injection vulnerability in Reportico Till

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

CVE-2023-47438

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

CVE-2023-47438

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

CVE-2023-47438

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

Reportico 安全漏洞

Reportico is an open source PHP report designer from the individual developer Peter Deed. A security vulnerability exists in Reportico Till version 8.1.0, which stems from an SQL injection vulnerability that could allow an attacker to obtain sensitive or other system information via the parameter...

CVE-2023-47438

Summary: CVE-2023-47438 affects Reportico Till up to version 8.1.0. Multiple sources describe a SQL Injection vulnerability in the project parameter that could disclose sensitive information or other system data. The Red Hat and Veracode entries corroborate the issue; PT-Security notes versions p...

CVE-2023-47438

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

Cross Site Scripting

Reportico is vulnerable to Cross Site Scripting. The vulnerability is due to improper input sanitization in the project report title. The attacker can exploit this issue by injecting malicious JavaScript in the title field...

GHSA-9CW9-M7HG-W8MF Reportico Cross-site Scripting vulnerability

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

Reportico Cross-site Scripting vulnerability

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

CVE-2023-46925

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

CVE-2023-46925

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

CVE-2023-46925

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

Cross site scripting

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...