CVE-2026-48239

Open ISES Tickets contains a SQL injection vulnerability in ajax/reports.php: the tick_id POST parameter is directly concatenated into the WHERE clause of the incidents summary report queries without sanitization. This allows authenticated attackers to influence query semantics and potentially re...

The vulnerability in the email report sending process of the Reports.PHP script allows a perpetrator to write any file onto the disk.

The vulnerability in the email report sending process of the Reports.PHP script is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to write any file to the disk...

CVE-2017-12776

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter...