CVE-2024-31556
An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function.
Published Updated
PatchFirst · Latest vulnerabilities
reportico-web/reportico vulnerabilities
Vulnerabilities published for reportico-web/reportico in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 4
CVE-2023-48865
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL.
Published UpdatedCVE-2023-47438
SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.
Published UpdatedCVE-2023-46925
Reportico 7.1.21 is vulnerable to Cross Site Scripting (XSS).
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.