Skip to content
OpenAdvisories

Vendor

ICT Innovations

2 known vulnerabilities.

Products

ICTBroadcast 1 ICT Innovations’ PHP-CGI/PHP-FPM configuration 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-7190

    Reflected Cross-Site Scripting in ICT Innovations’ PHP-CGI/PHP-FPM configuration

    A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the demo environment. The vulnerability is found in the ‘login.php’ endpoint, where the ‘editForm[extension_username]’ parameter is reflected in the response without proper…

    ICT Innovations ICT Innovations’ PHP-CGI/PHP-FPM configuration