Vulnerabilidades em Open ISES

44 resultados
Análise Vexday

Open ISES apresenta 44 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando descoberta recente massiva de problemas de segurança. Embora apenas 2 sejam críticas, a dominância de CWE-79 (cross-site scripting) aponta fraqueza estrutural em validação de entrada; nenhuma está sob ataque ativo conhecido até o momento, abrindo janela para remediação antes de exploração generalizada.

CVE-2026-48241CRITICALOpen ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.phpEPSS 0.5%CVE-2026-48242CRITICALOpen ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.phpEPSS 0.5%CVE-2026-48235HIGHOpen ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker DataEPSS 0.4%CVE-2026-48245MEDIUMOpen ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.phpEPSS 0.4%CVE-2026-48243MEDIUMOpen ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.phpEPSS 0.4%CVE-2026-48244MEDIUMOpen ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.phpEPSS 0.4%CVE-2026-48234HIGHOpen ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir ParametersEPSS 0.4%CVE-2026-48231HIGHOpen ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple ParametersEPSS 0.4%CVE-2026-48237HIGHOpen ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id ParametersEPSS 0.4%CVE-2026-48239HIGHOpen ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id ParameterEPSS 0.4%CVE-2026-48236HIGHOpen ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple ParametersEPSS 0.4%CVE-2026-48232HIGHOpen ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset ParameterEPSS 0.4%CVE-2026-48240HIGHOpen ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id ParametersEPSS 0.4%CVE-2026-48233HIGHOpen ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset ParameterEPSS 0.4%CVE-2026-48238HIGHOpen ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id ParameterEPSS 0.4%CVE-2018-25401HIGHThe Open ISES Project 3.30A SQL Injection via sever_graph.phpEPSS 0.3%CVE-2018-25402HIGHThe Open ISES Project 3.30A SQL Injection via inc_types_graph.phpEPSS 0.3%CVE-2018-25399HIGHThe Open ISES Project 3.30A SQL Injection via nearby.phpEPSS 0.3%CVE-2018-25403HIGHThe Open ISES Project 3.30A SQL Injection via city_graph.phpEPSS 0.3%CVE-2018-25400HIGHThe Open ISES Project 3.30A SQL Injection via form_post.phpEPSS 0.3%