# cve.now: Open Ises

The newest entries naming Open Ises as an affected vendor (up to 200), of 44 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2018-25404](https://cve.now/CVE-2018-25404.md): The Open ISES Project 3.30A SQL Injection via add\_facnote.php (CVSS 8.8)
- [CVE-2018-25403](https://cve.now/CVE-2018-25403.md): The Open ISES Project 3.30A SQL Injection via city\_graph.php (CVSS 8.8)
- [CVE-2018-25402](https://cve.now/CVE-2018-25402.md): The Open ISES Project 3.30A SQL Injection via inc\_types\_graph.php (CVSS 8.8)
- [CVE-2018-25401](https://cve.now/CVE-2018-25401.md): The Open ISES Project 3.30A SQL Injection via sever\_graph.php (CVSS 8.8)
- [CVE-2018-25400](https://cve.now/CVE-2018-25400.md): The Open ISES Project 3.30A SQL Injection via form\_post.php (CVSS 8.8)
- [CVE-2018-25399](https://cve.now/CVE-2018-25399.md): The Open ISES Project 3.30A SQL Injection via nearby.php (CVSS 8.8)
- [CVE-2018-25398](https://cve.now/CVE-2018-25398.md): The Open ISES Project 3.30A SQL Injection via main.php (CVSS 8.8)
- [CVE-2026-48249](https://cve.now/CVE-2026-48249.md): Open ISES Tickets \< 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile\_login.inc.php (CVSS 8.2)
- [CVE-2026-48248](https://cve.now/CVE-2026-48248.md): Open ISES Tickets \< 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php (CVSS 8.2)
- [CVE-2026-48247](https://cve.now/CVE-2026-48247.md): Open ISES Tickets \< 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php (CVSS 8.2)
- [CVE-2026-48246](https://cve.now/CVE-2026-48246.md): Open ISES Tickets \< 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php (CVSS 8.2)
- [CVE-2026-48245](https://cve.now/CVE-2026-48245.md): Open ISES Tickets \< 3.44.2 Hardcoded Google Maps API Key in tables.php (CVSS 6.9)
- [CVE-2026-48244](https://cve.now/CVE-2026-48244.md): Open ISES Tickets \< 3.44.2 Hardcoded Google Maps API Key in settings.inc.php (CVSS 6.9)
- [CVE-2026-48243](https://cve.now/CVE-2026-48243.md): Open ISES Tickets \< 3.44.2 Hardcoded WhitePages API Key in wp1.php (CVSS 6.9)
- [CVE-2026-48242](https://cve.now/CVE-2026-48242.md): Open ISES Tickets \< 3.44.2 Hardcoded MySQL Database Credentials in import\_mdb.php (CVSS 9.2)
- [CVE-2026-48241](https://cve.now/CVE-2026-48241.md): Open ISES Tickets \< 3.44.2 Hardcoded MySQL Database Credentials in loader.php (CVSS 9.2)
- [CVE-2026-48240](https://cve.now/CVE-2026-48240.md): Open ISES Tickets \< 3.44.2 SQL Injection via ajax/statistics.php tick\_id and f\_tick\_id Parameters (CVSS 7.1)
- [CVE-2026-48239](https://cve.now/CVE-2026-48239.md): Open ISES Tickets \< 3.44.2 SQL Injection via ajax/reports.php tick\_id Parameter (CVSS 7.1)
- [CVE-2026-48238](https://cve.now/CVE-2026-48238.md): Open ISES Tickets \< 3.44.2 SQL Injection via ajax/mobile\_main.php id Parameter (CVSS 7.1)
- [CVE-2026-48237](https://cve.now/CVE-2026-48237.md): Open ISES Tickets \< 3.44.2 SQL Injection via message.php frm\_ticket\_id and frm\_resp\_id Parameters (CVSS 7.1)
- [CVE-2026-48236](https://cve.now/CVE-2026-48236.md): Open ISES Tickets \< 3.44.2 SQL Injection via db\_loader.php Multiple Parameters (CVSS 7.1)
- [CVE-2026-48235](https://cve.now/CVE-2026-48235.md): Open ISES Tickets \< 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data (CVSS 8.8)
- [CVE-2026-48234](https://cve.now/CVE-2026-48234.md): Open ISES Tickets \< 3.44.2 SQL Injection via portal/ajax/list\_requests.php sort and dir Parameters (CVSS 7.1)
- [CVE-2026-48233](https://cve.now/CVE-2026-48233.md): Open ISES Tickets \< 3.44.2 SQL Injection via ajax/sit\_incidents.php offset Parameter (CVSS 7.1)
- [CVE-2026-48232](https://cve.now/CVE-2026-48232.md): Open ISES Tickets \< 3.44.2 SQL Injection via ajax/fullsit\_incidents.php offset Parameter (CVSS 7.1)
- [CVE-2026-48231](https://cve.now/CVE-2026-48231.md): Open ISES Tickets \< 3.44.2 SQL Injection via tables.php Multiple Parameters (CVSS 7.1)
- [CVE-2026-48230](https://cve.now/CVE-2026-48230.md): Open ISES Tickets \< 3.44.2 Reflected XSS via ticketsmdb\_import.php Multiple POST Parameters (CVSS 5.1)
- [CVE-2026-48229](https://cve.now/CVE-2026-48229.md): Open ISES Tickets \< 3.44.2 Reflected XSS via routes\_i.php ticket\_id Parameter (CVSS 5.1)
- [CVE-2026-48228](https://cve.now/CVE-2026-48228.md): Open ISES Tickets \< 3.44.2 Reflected XSS via patient\_w.php id and ticket\_id Parameters (CVSS 5.1)
- [CVE-2026-48227](https://cve.now/CVE-2026-48227.md): Open ISES Tickets \< 3.44.2 Reflected XSS via patient.php id and ticket\_id Parameters (CVSS 5.1)
- [CVE-2026-48226](https://cve.now/CVE-2026-48226.md): Open ISES Tickets \< 3.44.2 Reflected XSS via os\_watch.php ref and mode\_orig Parameters (CVSS 5.1)
- [CVE-2026-48225](https://cve.now/CVE-2026-48225.md): Open ISES Tickets \< 3.44.2 Reflected XSS via landb.php \_type Parameter (CVSS 5.1)
- [CVE-2026-48224](https://cve.now/CVE-2026-48224.md): Open ISES Tickets \< 3.44.2 Reflected XSS via ics214.php frm\_add\_str Parameter (CVSS 5.1)
- [CVE-2026-48223](https://cve.now/CVE-2026-48223.md): Open ISES Tickets \< 3.44.2 Reflected XSS via ics213rr.php frm\_add\_str Parameter (CVSS 5.1)
- [CVE-2026-48222](https://cve.now/CVE-2026-48222.md): Open ISES Tickets \< 3.44.2 Reflected XSS via ics213.php frm\_add\_str Parameter (CVSS 5.1)
- [CVE-2026-48221](https://cve.now/CVE-2026-48221.md): Open ISES Tickets \< 3.44.2 Reflected XSS via ics205a.php frm\_add\_str Parameter (CVSS 5.1)
- [CVE-2026-48220](https://cve.now/CVE-2026-48220.md): Open ISES Tickets \< 3.44.2 Reflected XSS via ics205.php frm\_add\_str Parameter (CVSS 5.1)
- [CVE-2026-48219](https://cve.now/CVE-2026-48219.md): Open ISES Tickets \< 3.44.2 Reflected XSS via ics202.php frm\_add\_str Parameter (CVSS 5.1)
- [CVE-2026-48218](https://cve.now/CVE-2026-48218.md): Open ISES Tickets \< 3.44.2 Reflected XSS via icons/buttons/landb.php frm\_name and frm\_id Parameters (CVSS 5.1)
- [CVE-2026-48217](https://cve.now/CVE-2026-48217.md): Open ISES Tickets \< 3.44.2 Reflected XSS via delete\_module.php Multiple POST Parameters (CVSS 5.1)
- [CVE-2026-48216](https://cve.now/CVE-2026-48216.md): Open ISES Tickets \< 3.44.2 Reflected XSS via db\_loader.php Multiple POST Parameters (CVSS 5.1)
- [CVE-2026-48215](https://cve.now/CVE-2026-48215.md): Open ISES Tickets \< 3.44.2 Reflected XSS via circle.php frm\_id Parameter (CVSS 5.1)
- [CVE-2026-48214](https://cve.now/CVE-2026-48214.md): Open ISES Tickets \< 3.44.2 Reflected XSS via add\_nm.php ticket\_id Parameter (CVSS 5.1)
- [CVE-2026-48213](https://cve.now/CVE-2026-48213.md): Open ISES Tickets \< 3.44.2 Reflected XSS via add.php ticket\_id Parameter (CVSS 5.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/open-ises
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.