12 matches found
CVE-2023-48865
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...
CVE-2023-48865
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...
CVE-2023-48865
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...
CVE-2023-48865: Improper Authentication
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...
CVE-2023-48865
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...
CVE-2023-48865
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...
CVE-2023-48865
An information disclosure vulnerability exists in Reportico (specifically versions prior to 8.1.0 ), an open-source PHP report designer. The root cause is the improper handling of user input within the execute_mode parameter of the URL, which allows an attacker to obtain sensitive information . T...
SQL Injection vulnerability in Reportico Till
SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...
GHSA-JJF4-959W-F545 SQL Injection vulnerability in Reportico Till
SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...
CVE-2023-47438
SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...
CVE-2023-47438
The Reportico report designer (specifically Reportico Till versions prior to 8.1.0 ) is vulnerable to an SQL Injection vulnerability. The root cause is improper input validation in the project parameter , which allows an attacker to inject malicious SQL queries. Successful exploitation enables an...