reportico vulnerabilities

Products

• reportico 4
• php report designer 1

Latest reportico CVEs

Newest publication first

1. CVE-2024-31556 Reportico Web fails to invalidate cookies upon logout

   Published 2024-05-14

   High·CVSS 7.8 EPSS 0.21%

   An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function.

2. CVE-2023-48865 Reportico affected by Incorrect Access Control

   Published 2024-04-11

   Medium·CVSS 6.5 EPSS 0.56%

   An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL.

3. CVE-2023-47438 SQL Injection vulnerability in Reportico Till

   Published 2024-03-27

   Medium·CVSS 6.5 EPSS 0.48%

   SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.

4. CVE-2023-46925 Reportico Cross-site Scripting vulnerability

   Published 2023-11-02

   Medium·CVSS 4.8 EPSS 0.43%

   Reportico 7.1.21 is vulnerable to Cross Site Scripting (XSS).

5. CVE-2014-3777 Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the xmlin parameter.

   Published 2014-07-16

   Medium·CVSS 5.0 EPSS 3.7%

   Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the xmlin parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.