CVE-2024-31556
An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function.
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в reportico-web/reportico опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 4
An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function.
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL.
SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.
Reportico 7.1.21 is vulnerable to Cross Site Scripting (XSS).
Сопоставьте установленный стек и версии со свежими базами уязвимостей.