OOpen ISES

Products

Exploited and recent CVEs

• CVE-2026-48249 Medium 5.9 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php 0.2%
• CVE-2026-48248 Medium 5.9 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php 0.2%
• CVE-2026-48247 Medium 5.9 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php 0.2%
• CVE-2026-48246 Medium 5.9 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php 0.2%
• CVE-2026-48245 Medium 5.3 Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php 0.2%
• CVE-2026-48244 Medium 5.3 Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php 0.2%
• CVE-2026-48243 Medium 5.3 Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php 0.2%
• CVE-2026-48242 High 8.1 Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php 0.3%
• CVE-2026-48241 High 8.1 Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php 0.3%
• CVE-2026-48240 High 7.1 Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters 0.2%
• CVE-2026-48239 High 7.1 Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter 0.2%
• CVE-2026-48238 High 7.1 Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter 0.2%
• CVE-2026-48237 High 7.1 Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters 0.2%
• CVE-2026-48236 High 7.1 Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters 0.2%
• CVE-2026-48235 High 8.2 Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data 0.2%
• CVE-2026-48234 High 7.1 Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters 0.2%
• CVE-2026-48233 High 7.1 Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter 0.2%
• CVE-2026-48232 High 7.1 Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter 0.2%
• CVE-2026-48231 High 7.1 Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters 0.2%
• CVE-2026-48230 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters 0.2%
• CVE-2026-48229 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter 0.2%
• CVE-2026-48228 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters 0.2%
• CVE-2026-48227 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters 0.2%
• CVE-2026-48226 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters 0.2%
• CVE-2026-48225 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter 0.2%
• CVE-2026-48224 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter 0.3%
• CVE-2026-48223 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter 0.2%
• CVE-2026-48222 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str Parameter 0.2%
• CVE-2026-48221 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str Parameter 0.2%
• CVE-2026-48220 Medium 5.4 Open ISES Tickets < 3.44.2 Reflected XSS via ics205.php frm_add_str Parameter 0.2%