Skip to content
OpenAdvisories

Vendor

openises

11 known vulnerabilities.

Products

tickets 10 Open ISES Project 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 4.6
    CVE-2026-35016

    Open ISES Tickets < 3.44.2 Reflected XSS via search.php frm_query Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frm_query POST parameter directly into an HTML…

    openises tickets
  • Medium 4.6
    CVE-2026-35015

    Open ISES Tickets < 3.44.2 Reflected XSS via do_unit_mail.php the_ticket Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in do_unit_mail.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the the_ticket GET parameter directly into a…

    openises tickets
  • Medium 4.6
    CVE-2026-35014

    Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php ticket_id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hid…

    openises tickets
  • Medium 4.6
    CVE-2026-35013

    Open ISES Tickets < 3.44.2 Reflected XSS via street_view.php thelat and thelng Parameters

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in street_view.php that allows authenticated attackers to inject arbitrary JavaScript by passing unsanitized values through the thelat and thelng GET parameters directly i…

    openises tickets
  • Medium 4.6
    CVE-2026-35012

    Open ISES Tickets < 3.44.2 Reflected XSS via add_facnote.php ticket_id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a h…

    openises tickets
  • Medium 4.6
    CVE-2026-35011

    Open ISES Tickets < 3.44.2 Reflected XSS via opena.php frm_call Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frm_call GET parameter directly into page outpu…

    openises tickets
  • Medium 4.6
    CVE-2026-35010

    Open ISES Tickets < 3.44.2 Reflected XSS via patient_JF.php ticket_id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a Ja…

    openises tickets
  • Medium 4.6
    CVE-2026-35009

    Open ISES Tickets < 3.44.2 Reflected XSS via add_note.php ticket_id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_note.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hidd…

    openises tickets
  • Medium 4.6
    CVE-2026-35008

    Open ISES Tickets < 3.44.2 Reflected XSS via single.php ticket_id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into an HTML …

    openises tickets
  • Medium 4.6
    CVE-2026-35007

    Open ISES Tickets < 3.44.2 Reflected XSS via single_unit.php id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the id GET parameter directly into an HTML at…

    openises tickets