Tickets
Open ISES · 37 CVEs
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php
May 21, 2026
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php
May 21, 2026
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php
May 21, 2026
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php
May 21, 2026
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php
May 21, 2026
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php
May 21, 2026
Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php
May 21, 2026
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php
May 21, 2026
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php
May 21, 2026
Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters
May 21, 2026
Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter
May 21, 2026
Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter
May 21, 2026
Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters
May 21, 2026
Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters
May 21, 2026
Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data
May 21, 2026
Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters
May 21, 2026
Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter
May 21, 2026
Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter
May 21, 2026
Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters
May 21, 2026
Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters
May 21, 2026
Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter
May 21, 2026
Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters
May 21, 2026
Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters
May 21, 2026
Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters
May 21, 2026
Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter
May 21, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-48249 | Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php | HIGH | 0.27% | May 21, 2026 |
| CVE-2026-48248 | Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php | HIGH | 0.31% | May 21, 2026 |
| CVE-2026-48247 | Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php | HIGH | 0.27% | May 21, 2026 |
| CVE-2026-48246 | Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php | HIGH | 0.27% | May 21, 2026 |
| CVE-2026-48245 | Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php | MEDIUM | 0.38% | May 21, 2026 |
| CVE-2026-48244 | Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php | MEDIUM | 0.38% | May 21, 2026 |
| CVE-2026-48243 | Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php | MEDIUM | 0.38% | May 21, 2026 |
| CVE-2026-48242 | Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php | CRITICAL | 0.51% | May 21, 2026 |
| CVE-2026-48241 | Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php | CRITICAL | 0.52% | May 21, 2026 |
| CVE-2026-48240 | Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters | HIGH | 0.36% | May 21, 2026 |
| CVE-2026-48239 | Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter | HIGH | 0.36% | May 21, 2026 |
| CVE-2026-48238 | Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter | HIGH | 0.36% | May 21, 2026 |
| CVE-2026-48237 | Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters | HIGH | 0.36% | May 21, 2026 |
| CVE-2026-48236 | Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters | HIGH | 0.36% | May 21, 2026 |
| CVE-2026-48235 | Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data | HIGH | 0.40% | May 21, 2026 |
| CVE-2026-48234 | Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters | HIGH | 0.36% | May 21, 2026 |
| CVE-2026-48233 | Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter | HIGH | 0.36% | May 21, 2026 |
| CVE-2026-48232 | Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter | HIGH | 0.36% | May 21, 2026 |
| CVE-2026-48231 | Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters | HIGH | 0.36% | May 21, 2026 |
| CVE-2026-48230 | Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters | MEDIUM | 0.29% | May 21, 2026 |
| CVE-2026-48229 | Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter | MEDIUM | 0.29% | May 21, 2026 |
| CVE-2026-48228 | Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters | MEDIUM | 0.29% | May 21, 2026 |
| CVE-2026-48227 | Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters | MEDIUM | 0.29% | May 21, 2026 |
| CVE-2026-48226 | Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters | MEDIUM | 0.29% | May 21, 2026 |
| CVE-2026-48225 | Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter | MEDIUM | 0.29% | May 21, 2026 |
Showing 1 to 25 of 37 CVEs