Advisories · Technology
Open ISES Tickets.
Every CVE that names Open ISES Tickets among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php
- Open ISES Tickets
- Weak cryptography or TLS
- CVSS 8.2 High
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php
- Open ISES Tickets
- Weak cryptography or TLS
- CVSS 8.2 High
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php
- Open ISES Tickets
- Weak cryptography or TLS
- CVSS 8.2 High
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php
- Open ISES Tickets
- Weak cryptography or TLS
- CVSS 6.9 Medium
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php
- Open ISES Tickets
- Hard-coded credentials
- CVSS 6.9 Medium
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php
- Open ISES Tickets
- Hard-coded credentials
- CVSS 6.9 Medium
Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php
- Open ISES Tickets
- Hard-coded credentials
- CVSS 9.2 CriticalCritical · CVSS 9+
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php
- Open ISES Tickets
- Hard-coded credentials
- CVSS 9.2 CriticalCritical · CVSS 9+
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php
- Open ISES Tickets
- Hard-coded credentials
- CVSS 7.1 High
Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters
- Open ISES Tickets
- SQL injection
- CVSS 7.1 High
Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter
- Open ISES Tickets
- SQL injection
- CVSS 7.1 High
Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter
- Open ISES Tickets
- SQL injection
- CVSS 7.1 High
Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters
- Open ISES Tickets
- SQL injection
- CVSS 7.1 High
Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters
- Open ISES Tickets
- SQL injection
- CVSS 8.8 High
Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data
- Open ISES Tickets
- SQL injection
- CVSS 7.1 High
Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters
- Open ISES Tickets
- SQL injection
- CVSS 7.1 High
Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter
- Open ISES Tickets
- SQL injection
- CVSS 7.1 High
Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter
- Open ISES Tickets
- SQL injection
- CVSS 7.1 High
Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters
- Open ISES Tickets
- SQL injection
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via ics205.php frm_add_str Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via ics202.php frm_add_str Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via icons/buttons/landb.php frm_name and frm_id Parameters
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via delete_module.php Multiple POST Parameters
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via db_loader.php Multiple POST Parameters
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via circle.php frm_id Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Open ISES Tickets < 3.44.2 Reflected XSS via add.php ticket_id Parameter
- Open ISES Tickets
- Cross-site scripting (XSS)