Reportico : Security Vulnerabilities, CVEs,
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL.
Max CVSS
N/A
EPSS Score
0.04%
Published
2024-04-11
Updated
2024-04-12
SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.
Max CVSS
N/A
EPSS Score
0.04%
Published
2024-03-27
Updated
2024-03-28
Reportico 7.1.21 is vulnerable to Cross Site Scripting (XSS).
Max CVSS
4.8
EPSS Score
0.05%
Published
2023-11-02
Updated
2023-11-09
Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the xmlin parameter.
Max CVSS
5.0
EPSS Score
0.34%
Published
2014-07-16
Updated
2014-07-16
4 vulnerabilities found