Skip to content
Spip Tickets vulnerabilities
-
open ises tickets
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php
CVE-2026-48249
8.2 High
-
open ises tickets
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php
CVE-2026-48248
8.2 High
-
open ises tickets
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php
CVE-2026-48247
8.2 High
-
open ises tickets
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php
CVE-2026-48246
8.2 High
-
open ises tickets
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php
CVE-2026-48245
6.9 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php
CVE-2026-48244
6.9 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php
CVE-2026-48243
6.9 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php
CVE-2026-48242
9.2 Critical
-
open ises tickets
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php
CVE-2026-48241
9.2 Critical
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters
CVE-2026-48240
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter
CVE-2026-48239
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter
CVE-2026-48238
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters
CVE-2026-48237
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters
CVE-2026-48236
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data
CVE-2026-48235
8.8 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters
CVE-2026-48234
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter
CVE-2026-48233
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter
CVE-2026-48232
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters
CVE-2026-48231
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters
CVE-2026-48230
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter
CVE-2026-48229
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters
CVE-2026-48228
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters
CVE-2026-48227
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters
CVE-2026-48226
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter
CVE-2026-48225
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter
CVE-2026-48224
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter
CVE-2026-48223
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str Parameter
CVE-2026-48222
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str Parameter
CVE-2026-48221
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics205.php frm_add_str Parameter
CVE-2026-48220
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics202.php frm_add_str Parameter
CVE-2026-48219
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via icons/buttons/landb.php frm_name and frm_id Parameters
CVE-2026-48218
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via delete_module.php Multiple POST Parameters
CVE-2026-48217
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via db_loader.php Multiple POST Parameters
CVE-2026-48216
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via circle.php frm_id Parameter
CVE-2026-48215
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id Parameter
CVE-2026-48214
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via add.php ticket_id Parameter
CVE-2026-48213
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via search.php frm_query Parameter
CVE-2026-35016
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via do_unit_mail.php the_ticket Parameter
CVE-2026-35015
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php ticket_id Parameter
CVE-2026-35014
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via street_view.php thelat and thelng Parameters
CVE-2026-35013
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via add_facnote.php ticket_id Parameter
CVE-2026-35012
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via opena.php frm_call Parameter
CVE-2026-35011
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via patient_JF.php ticket_id Parameter
CVE-2026-35010
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via add_note.php ticket_id Parameter
CVE-2026-35009
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via single.php ticket_id Parameter
CVE-2026-35008
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via single_unit.php id Parameter
CVE-2026-35007
5.1 Medium
-
spip tickets
SPIP tickets < 4.3.3 Unauthenticated RCE
CVE-2026-27744
9.3 Critical