CVE Vulnerability Catalog

Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/functions.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing general-purpose outbound HTTPS requests via shared helper functions. An attacker on the network path can present a forged certificate to intercept, monitor, or modify the request and response, including API keys or session-bearing data.

Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker on the network path can present a forged certificate to intercept, monitor, or modify the request and response, including API keys or session-bearing data.

Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud project.

Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud project.

Open ISES Tickets before version 3.44.2 embeds a hardcoded WhitePages reverse-phone API key in wp1.php that is committed to the public source repository. Any actor with read access to the source tree can extract the key and use it to make third-party API calls billed to or rate-limited against the original owner's WhitePages account.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in ticketsmdb_import.php. An authenticated attacker can inject arbitrary JavaScript via multiple POST parameters that are directly placed into HTML form hidden input value attributes.

Open ISES Tickets before 3.44.2 contains a reflected XSS vulnerability in routes_i.php. An authenticated attacker can inject arbitrary JavaScript via an unsanitized ticket_id GET parameter that is directly placed into the value attribute of a hidden HTML form input.

Open ISES Tickets before 3.44.2 contains a reflected XSS vulnerability in patient_w.php. An authenticated attacker can inject arbitrary JavaScript via unsanitized id and ticket_id GET parameters that are directly placed into the action attribute of an HTML form.

Open ISES Tickets before 3.44.2 contains a reflected XSS vulnerability in patient.php. An authenticated attacker can inject arbitrary JavaScript via unsanitized id and ticket_id GET parameters that are directly placed into the action attribute of an HTML form.

Open ISES Tickets before 3.44.2 contains a reflected XSS vulnerability in os_watch.php. An authenticated attacker can inject arbitrary JavaScript via unsanitized ref and mode_orig POST parameters that are directly placed into the value attributes of hidden HTML form inputs.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in landb.php. An authenticated attacker can inject arbitrary JavaScript via the _type POST parameter, which is directly placed into an HTML form hidden input value attribute.

Open ISES Tickets before version 3.44.2 contains a reflected cross-site scripting vulnerability in ics214.php. It allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frm_add_str POST parameter directly into an HTML form hidden input value attribute.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in ics213rr.php. An authenticated attacker can inject arbitrary JavaScript via the frm_add_str POST parameter, which is directly placed into an HTML form hidden input value attribute.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in ics213.php. An authenticated attacker can inject arbitrary JavaScript via the frm_add_str POST parameter, which is directly placed into an HTML form hidden input value attribute.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in ics205a.php. An authenticated attacker can inject arbitrary JavaScript via the frm_add_str POST parameter, which is directly placed into an HTML form hidden input value attribute.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in ics205.php. An authenticated attacker can inject arbitrary JavaScript via the frm_add_str POST parameter, which is directly placed into an HTML form hidden input value attribute.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in ics202.php. An authenticated attacker can inject arbitrary JavaScript via the frm_add_str POST parameter, which is directly placed into an HTML form hidden input value attribute.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in icons/buttons/landb.php. An authenticated attacker can inject arbitrary JavaScript by passing unsanitized values in POST parameters frm_name and frm_id, which are directly rendered into HTML and inline JavaScript.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in delete_module.php. An authenticated attacker can inject arbitrary JavaScript via multiple POST parameters (module_choice, flag, confirmation) that are directly placed into rendered HTML content and form action attributes.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in db_loader.php. An authenticated attacker can inject arbitrary JavaScript by passing unsanitized values in POST parameters (ticketshost, ticketsdb, ticketsuser, ticketspassword, ticketsprefix, db_schema) directly into HTML form input value attributes.