Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

tickets — Vulnerabilities & Security Advisories 48

All 48 CVE vulnerabilities found in tickets, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with tickets, a specific product identifier within the software ecosystem. It collects reported weaknesses, including memory corruption, access control flaws, and information disclosure issues, documented over a multi-year period to provide a comprehensive historical record. Readers can use this aggregation to track a vendor's security advisories, analyze the prevalence of specific weakness classes, or examine the long-term vulnerability history of this particular product component. The data serves as a reference for security professionals seeking to understand the risk profile and remediation trends related to ticketing systems or modules labeled as tickets.

Vendor: SPIP

CVE ID Title CVSS Severity Published
CVE-2026-48249 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php CWE-295 5.9 Medium 2026-05-21
CVE-2026-48248 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php CWE-295 5.9 Medium 2026-05-21
CVE-2026-48247 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php CWE-295 5.9 Medium 2026-05-21
CVE-2026-48246 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php CWE-295 5.9 Medium 2026-05-21
CVE-2026-48245 Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php CWE-798 5.3 Medium 2026-05-21
CVE-2026-48244 Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php CWE-798 5.3 Medium 2026-05-21
CVE-2026-48243 Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php CWE-798 5.3 Medium 2026-05-21
CVE-2026-48242 Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php CWE-798 8.1 High 2026-05-21
CVE-2026-48241 Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php CWE-798 8.1 High 2026-05-21
CVE-2026-48240 Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters CWE-89 7.1 High 2026-05-21
CVE-2026-48239 Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter CWE-89 7.1 High 2026-05-21
CVE-2026-48238 Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter CWE-89 7.1 High 2026-05-21
CVE-2026-48237 Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters CWE-89 7.1 High 2026-05-21
CVE-2026-48236 Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters CWE-89 7.1 High 2026-05-21
CVE-2026-48235 Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data CWE-89 8.2 High 2026-05-21
CVE-2026-48234 Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters CWE-89 7.1 High 2026-05-21
CVE-2026-48233 Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter CWE-89 7.1 High 2026-05-21
CVE-2026-48232 Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter CWE-89 7.1 High 2026-05-21
CVE-2026-48231 Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters CWE-89 7.1 High 2026-05-21
CVE-2026-48230 Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters CWE-79 5.4 Medium 2026-05-21
CVE-2026-48229 Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter CWE-79 5.4 Medium 2026-05-21
CVE-2026-48228 Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters CWE-79 5.4 Medium 2026-05-21
CVE-2026-48227 Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters CWE-79 5.4 Medium 2026-05-21
CVE-2026-48226 Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters CWE-79 5.4 Medium 2026-05-21
CVE-2026-48225 Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter CWE-79 5.4 Medium 2026-05-21
CVE-2026-48224 Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter CWE-79 5.4 Medium 2026-05-21
CVE-2026-48223 Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter CWE-79 5.4 Medium 2026-05-21
CVE-2026-48222 Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str Parameter CWE-79 5.4 Medium 2026-05-21
CVE-2026-48221 Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str Parameter CWE-79 5.4 Medium 2026-05-21
CVE-2026-48220 Open ISES Tickets < 3.44.2 Reflected XSS via ics205.php frm_add_str Parameter CWE-79 5.4 Medium 2026-05-21

All 48 known CVE vulnerabilities affecting tickets with full Chinese analysis, references, and POCs where available.