Product by Open Ises

    Tickets

    37 known vulnerabilities in Tickets (Open Ises), 0 of them actively exploited (CISA KEV).

    Key figures

    37

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Tickets (Open Ises)
    CriticalCVE-2026-48241

    Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php

    		8.1
    CriticalCVE-2026-48242

    Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php

    		8.1
    HighCVE-2026-48235

    Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data

    		8.2
    HighCVE-2026-48248

    Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php

    		5.9
    HighCVE-2026-48249

    Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php

    		5.9
    HighCVE-2026-48247

    Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php

    		5.9
    HighCVE-2026-48246

    Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php

    		5.9
    HighCVE-2026-48240

    Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters

    		7.1
    HighCVE-2026-48236

    Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters

    		7.1
    HighCVE-2026-48233

    Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter

    		7.1
    HighCVE-2026-48232

    Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter

    		7.1
    HighCVE-2026-48231

    Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters

    		7.1
    HighCVE-2026-48239

    Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter

    		7.1
    HighCVE-2026-48238

    Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter

    		7.1
    HighCVE-2026-48237

    Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters

    		7.1
    HighCVE-2026-48234

    Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters

    		7.1
    MediumCVE-2026-48244

    Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php

    		5.3
    MediumCVE-2026-48245

    Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php

    		5.3
    MediumCVE-2026-48243

    Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php

    		5.3
    MediumCVE-2026-48224

    Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter

    		5.4
    MediumCVE-2026-48218

    Open ISES Tickets < 3.44.2 Reflected XSS via icons/buttons/landb.php frm_name and frm_id Parameters

    		5.4
    MediumCVE-2026-48223

    Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter

    		5.4
    MediumCVE-2026-48219

    Open ISES Tickets < 3.44.2 Reflected XSS via ics202.php frm_add_str Parameter

    		5.4
    MediumCVE-2026-48215

    Open ISES Tickets < 3.44.2 Reflected XSS via circle.php frm_id Parameter

    		5.4
    MediumCVE-2026-48214

    Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id Parameter

    		5.4

    All vulnerabilities in search

    All products by Open Ises