7 matches found
CVE-2026-52607
A directory traversal vulnerability in reportico-web = 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web server by specifying the filename in the targetformat parameter in conjunction with the executemode=EXECUTE parameter of the run.php endpoint...
CVE-2026-52606
A reflected cross-site scripting XSS vulnerability in reportico-web = 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a malicious payload in the loadTemplate parameter in conjunction with the executemode=PREPARE parameter of run.php...
CVE-2026-52609
The reportico-web software, version
CVE-2026-52607
A directory traversal vulnerability exists in reportico-web versions
CVE-2026-52606
A reflected cross-site scripting (XSS) vulnerability exists in reportico-web version
Reportico affected by Incorrect Access Control
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...