SQL Injection vulnerability in Reportico Till

MEDIUM 6.5CVE-2023-47438 · GHSA-jjf4-959w-f545 · Published 27/03/2024 · updated 17/06/2026

In short

CVE-2023-47438 is a MEDIUM (CVSS 6.5) vulnerability affecting reportico-web/reportico.
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
reportico-web/reportico Packagist	`≤ 8.1.0`	No fix yet

Description

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.

NVD description

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.

References

nvd.nist.gov/vuln/detail/CVE-2023-47438 · ADVISORY
reportico-web/reportico · WEB
reportico-web/reportico · PACKAGE

More vulnerabilities in reportico-web/reportico

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free