What’s Vulnerable › Products

Open ISES Tickets vulnerabilities

37 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 37 published in the last 12 months.

Check whether your Open ISES Tickets version is affected

Latest Open ISES Tickets vulnerabilities

• CVE-2026-48249 — Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php (CVSS 5.9)
• CVE-2026-48248 — Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php (CVSS 5.9)
• CVE-2026-48247 — Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php (CVSS 5.9)
• CVE-2026-48246 — Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php (CVSS 5.9)
• CVE-2026-48245 — Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php (CVSS 5.3)
• CVE-2026-48244 — Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php (CVSS 5.3)
• CVE-2026-48243 — Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php (CVSS 5.3)
• CVE-2026-48242 — Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php (CVSS 8.1)
• CVE-2026-48241 — Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php (CVSS 8.1)
• CVE-2026-48240 — Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters (CVSS 7.1)
• CVE-2026-48239 — Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter (CVSS 7.1)
• CVE-2026-48238 — Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter (CVSS 7.1)
• CVE-2026-48237 — Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters (CVSS 7.1)
• CVE-2026-48236 — Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters (CVSS 7.1)
• CVE-2026-48235 — Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data (CVSS 8.2)
• CVE-2026-48234 — Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters (CVSS 7.1)
• CVE-2026-48233 — Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter (CVSS 7.1)
• CVE-2026-48232 — Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter (CVSS 7.1)
• CVE-2026-48231 — Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters (CVSS 7.1)
• CVE-2026-48230 — Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters (CVSS 5.4)
• CVE-2026-48229 — Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter (CVSS 5.4)
• CVE-2026-48228 — Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters (CVSS 5.4)
• CVE-2026-48227 — Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters (CVSS 5.4)
• CVE-2026-48226 — Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters (CVSS 5.4)
• CVE-2026-48225 — Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter (CVSS 5.4)