Aashiqahamedno

**Name of the Vulnerable Software and Affected Versions** Reportico Web versions prior to 8.1.0 **Description** The issue allows a local attacker to execute arbitrary code and obtain sensitive information via the `sessionid` function. This vulnerability arises from the failure of the web application to properly invalidate session cookies upon logout, allowing an attacker to exploit the active session cookie and perform unauthorized actions. **Recommendations** For versions prior to 8.1.0, update to version 8.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `sessionid` function until a patch is available. Additionally, ensure that session cookies are properly invalidated upon logout to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Reportico versions prior to 8.1.0 **Description** An issue in Reportico allows attackers to obtain sensitive information via the `execute mode` parameter of the URL. **Recommendations** For versions prior to 8.1.0, update to version 8.1.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Reportico versions prior to 8.1.0 **Description** The issue allows attackers to obtain sensitive information or other system information via the `project` parameter. This is a SQL Injection vulnerability, which means attackers can inject malicious SQL code to manipulate the database and extract or modify sensitive data. **Recommendations** For versions prior to 8.1.0, update to version 8.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `project` parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Reportico version 7.1.21 **Description** The issue is related to Cross Site Scripting (XSS), which allows attackers to inject malicious scripts into websites. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** For Reportico version 7.1.21, at the moment, there is no information about a newer version that contains a fix for this vulnerability.