Open Ises vulnerabilities
44 CVEs and advisories name Open Ises as an affected vendor, newest first. Follow it as a feed.
- CVE-2018-25404The Open ISES Project 3.30A SQL Injection via add_facnote.php
- CVE-2018-25403The Open ISES Project 3.30A SQL Injection via city_graph.php
- CVE-2018-25402The Open ISES Project 3.30A SQL Injection via inc_types_graph.php
- CVE-2018-25401The Open ISES Project 3.30A SQL Injection via sever_graph.php
- CVE-2018-25400The Open ISES Project 3.30A SQL Injection via form_post.php
- CVE-2018-25399The Open ISES Project 3.30A SQL Injection via nearby.php
- CVE-2018-25398The Open ISES Project 3.30A SQL Injection via main.php
- CVE-2026-48249Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php
- CVE-2026-48248Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php
- CVE-2026-48247Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php
- CVE-2026-48246Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php
- CVE-2026-48245Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php
- CVE-2026-48244Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php
- CVE-2026-48243Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php
- CVE-2026-48242Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php
- CVE-2026-48241Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php
- CVE-2026-48240Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters
- CVE-2026-48239Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter
- CVE-2026-48238Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter
- CVE-2026-48237Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters
- CVE-2026-48236Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters
- CVE-2026-48235Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data
- CVE-2026-48234Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters
- CVE-2026-48233Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter
- CVE-2026-48232Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter
- CVE-2026-48231Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters
- CVE-2026-48230Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters
- CVE-2026-48229Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter
- CVE-2026-48228Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters
- CVE-2026-48227Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters