Skip to content
OpenAdvisories

Package · Packagist

reportico-web/reportico

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.8
    CVE-2024-31556

    Reportico Web fails to invalidate cookies upon logout

    An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function.

    reportico-web/reportico Packagist
  • Medium 6.5
    CVE-2023-48865

    Reportico affected by Incorrect Access Control

    An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL.

    reportico-web/reportico Packagist
  • Medium 6.5
    CVE-2023-47438

    SQL Injection vulnerability in Reportico Till

    SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.

    reportico-web/reportico Packagist
  • Medium 4.8
    CVE-2023-46925

    Reportico Cross-site Scripting vulnerability

    Reportico 7.1.21 is vulnerable to Cross Site Scripting (XSS).

    reportico-web/reportico Packagist