CVE-2026-52607

A directory traversal vulnerability in reportico-web = 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web server by specifying the filename in the targetformat parameter in conjunction with the executemode=EXECUTE parameter of the run.php endpoint...

CVE-2026-52606

CVE-2026-52606 is a reflected cross-site scripting (XSS) vulnerability in reportico-web versions up to and including 8.1.0 . The flaw is triggered by including a malicious payload in the loadTemplate parameter in conjunction with the execute_mode=PREPARE parameter of run.php , allowing a remote a...

CVE-2023-48865

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...