PT-2024-13656 · Reportico · Reportico

Name of the Vulnerable Software and Affected Versions: Reportico versions prior to 8.1.0 Description: An issue in Reportico allows attackers to obtain sensitive information via the execute mode parameter of the URL. Recommendations: For versions prior to 8.1.0, update to version 8.1.0 or later to...

CVE-2023-48865

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...

CVE-2023-48865

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...

SQL Injection

Reportico is vulnerable to SQL Injection. The vulnerability is due to improper input validation in the project parameter, allowing attackers to inject SQL queries and obtain sensitive information or other system information...

SQL Injection vulnerability in Reportico Till

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

GHSA-JJF4-959W-F545 SQL Injection vulnerability in Reportico Till

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

CVE-2023-47438

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

CVE-2023-47438

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

Reportico 安全漏洞

Reportico is an open source PHP report designer from the individual developer Peter Deed. A security vulnerability exists in Reportico Till version 8.1.0, which stems from an SQL injection vulnerability that could allow an attacker to obtain sensitive or other system information via the parameter...

CVE-2023-47438

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

CVE-2023-47438

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

CVE-2023-47438

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

CVE-2023-47438

The Reportico report designer (specifically Reportico Till versions prior to 8.1.0 ) is vulnerable to an SQL Injection vulnerability. The root cause is improper input validation in the project parameter , which allows an attacker to inject malicious SQL queries. Successful exploitation enables an...

CVE-2023-47438: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...

Cross Site Scripting

Reportico is vulnerable to Cross Site Scripting. The vulnerability is due to improper input sanitization in the project report title. The attacker can exploit this issue by injecting malicious JavaScript in the title field...

Reportico Cross-site Scripting vulnerability

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

GHSA-9CW9-M7HG-W8MF Reportico Cross-site Scripting vulnerability

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

CVE-2023-46925

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

CVE-2023-46925

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...

CVE-2023-46925

Reportico 7.1.21 is vulnerable to Cross Site Scripting XSS...