CVE-2023-46925

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

PT-2023-30263 · Reportico · Reportico

Name of the Vulnerable Software and Affected Versions: Reportico version 7.1.21 Description: The issue is related to Cross Site Scripting XSS, which allows attackers to inject malicious scripts into websites. No information is provided about the estimated number of potentially affected devices...

Reportico Security Breach

Reportico is an open source PHP report designer by Peter Deed, an individual developer. A security vulnerability exists in Reportico version 7.1.21 that stems from vulnerability to cross-site scripting XSS attacks...

CVE-2023-46925

CVE-2023-46925 affects Reportico 7.1.21 and is described as a Cross-Site Scripting (XSS) vulnerability. Multiple connected sources confirm the issue and attribute it to improper input handling in the report project (e.g., Veracode notes XSS due to unsanitized input in the title). The NVD/Red Hat ...

CVE-2023-46925

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

Directory Traversal

reportico-web/reportico is vulnerable to directory traversal attacks. Using the xmlin parameter and .. attackers can read files outside of the intended directory...

CVE-2014-3777

Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. dot dot in the xmlin parameter...

Directory traversal

Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. dot dot in the xmlin parameter...

CVE-2014-3777

Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. dot dot in the xmlin parameter...

CVE-2014-3777

CVE-2014-3777 affects Reportico PHP Report Designer before 4.0. A directory traversal flaw allows an attacker to read arbitrary files via the xmlin parameter (.. traversal). Multiple connected sources confirm the vulnerable component is the Reportico web UI, with the root cause in the xmlin handl...

Reportico < 4.0 Information Disclosure Vulnerability

Binary data 8329.prm...

Reportico Admin Credential Leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECV-05-1402 - Reportico software admin credentials leak Product description: Reportico is a comprehensive Open Source web reporting tool written purely in PHP. Reportico provides a web-based front end screen for designing and viewing reports stored i...