Lucene search
K

274 matches found

Vulnrichment
Vulnrichment
added 2023/01/27 12:0 a.m.6 views

CVE-2022-48013

Opencats v0.9.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /opencats/index.php?m=calendar. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description or Title text fields...

5.5AI score0.00516EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/01/27 12:0 a.m.3 views

Opencats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in Opencats version v0.9.7, which stems from its /opencats/index.php?m=settings&a=ajaxtagsupd component that allows an attacker to implement reflective cross-site scripting...

6.1CVSS5.5AI score0.0137EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/01/27 12:0 a.m.3 views

OpenCats SQL注入漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.7, which stems from the importID parameter of its Import viewerrors function that allows an attacker to implement SQL injection...

9.8CVSS8.6AI score0.01072EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/01/27 12:0 a.m.1 views

OpenCats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. OpenCats v0.9.7 version of a security vulnerability , the vulnerability stems from its /opencats/index.php?m=calendar component of the Description or Title of the text field of the operation allows an attacker to inject a carefully...

5.4CVSS5.7AI score0.00516EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/01/27 12:0 a.m.22 views

CVE-2022-48012

Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...

6.2AI score0.0137EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/01/27 12:0 a.m.15 views

CVE-2022-48011

Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function...

10AI score0.01072EPSS
Exploits1References2
CVE
CVE
added 2023/01/27 12:0 a.m.42 views

CVE-2022-48011

CVE-2022-48011 affects Opencats v0.9.7 with a SQL injection vulnerability via the importID parameter in the Import viewerrors function. The NVD/CVE details list a CVSS 3.1 base score of 9.8 (CRITICAL) with network attack vector, no user interaction, and no privileges required, impacting confident...

9.8CVSS9.7AI score0.01072EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/27 12:0 a.m.4 views

CVE-2022-48012

Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...

6.2AI score0.0137EPSS
Exploits1References2
CVE
CVE
added 2023/01/27 12:0 a.m.56 views

CVE-2022-48013

Opencats v0.9.7 contains a stored XSS vulnerability in the calendar component ( /opencats/index.php?m=calendar ). The underlying issue allows injecting payloads into the Description or Title fields, enabling execution of arbitrary web scripts or HTML by an attacker who can supply crafted input. C...

5.4CVSS5.3AI score0.00516EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2023/01/27 12:0 a.m.57 views

CVE-2022-48012

OpenCATS v0.9.7 contains a reflected XSS in the component /opencats/index.php?m=settings&a=ajax_tags_upd. Affected functionality allows an attacker to inject arbitrary JavaScript into a victim’s browser, potentially stealing cookies or hijacking sessions. Impact is described as client-side code e...

6.1CVSS6AI score0.0137EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2022/10/20 12:0 a.m.19 views

OpenCATS Cross-Site Scripting Vulnerability (CNVD-2022-70567)

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats v0.9.6, which stems from a security issue with the email parameter in the Check Email feature. No details of the vulnerability are provided at this time...

6.1CVSS6.2AI score0.01333EPSS
Exploits1References1
CNVD
CNVD
added 2022/10/20 12:0 a.m.19 views

OpenCATS Cross-Site Scripting Vulnerability (CNVD-2022-70590)

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which originates from an attacker being able to implement reflective cross-site scripting using its indexFile component. Currently there is no detailed vulnerability detai...

6.1CVSS6AI score0.01333EPSS
Exploits1References1
CNVD
CNVD
added 2022/10/20 12:0 a.m.19 views

OpenCATS Cross-Site Scripting Vulnerability (CNVD-2022-70588)

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can implement reflective cross-site scripting using its entriesPerPage parameter. No detailed vulnerability details are availabl...

6.1CVSS6AI score0.01278EPSS
Exploits1References1
CNVD
CNVD
added 2022/10/20 12:0 a.m.16 views

OpenCats SQL Injection Vulnerability (CNVD-2022-70569)

OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the tagid variable in the tag update function. No detailed vulnerability details are provided at this time...

6.5CVSS6.7AI score0.00777EPSS
Exploits1References1
CNVD
CNVD
added 2022/10/20 12:0 a.m.18 views

OpenCats SQL Injection Vulnerability

OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the entriesPerPage variable. No details of the vulnerability are provided at this time...

6.5CVSS6.7AI score0.00777EPSS
Exploits1References1
CNVD
CNVD
added 2022/10/20 12:0 a.m.18 views

OpenCats SQL Injection Vulnerability (CNVD-2022-70574)

OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the tagid variable in the tag delete function. No detailed vulnerability details are provided at this time...

6.5CVSS6.7AI score0.00777EPSS
Exploits1References1
CNVD
CNVD
added 2022/10/20 12:0 a.m.15 views

OpenCATS SQL Injection Vulnerability (CNVD-2022-70575)

OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the importID parameter in the Import viewerrors function. No detailed vulnerability details are available at this time...

6.5CVSS6.7AI score0.00777EPSS
Exploits1References1
CNVD
CNVD
added 2022/10/20 12:0 a.m.20 views

OpenCATS Cross-Site Scripting Vulnerability (CNVD-2022-70587)

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can implement reflective cross-site scripting using its joborderID parameter. No detailed vulnerability details are available at...

6.1CVSS6AI score0.01278EPSS
Exploits1References1
CNVD
CNVD
added 2022/10/20 12:0 a.m.20 views

OpenCATS has an unspecified vulnerability

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats v0.9.6, which stems from a security issue in the ajax function of getDataGridPager. No detailed vulnerability details are available at this time...

9.8CVSS9.5AI score0.01842EPSS
Exploits1References1
CNVD
CNVD
added 2022/10/20 12:0 a.m.23 views

OpenCATS Cross-Site Scripting Vulnerability (CNVD-2022-70589)

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can utilize its callback component to implement reflective cross-site scripting. No detailed vulnerability details are available...

6.1CVSS5.9AI score0.01333EPSS
Exploits1References1
Rows per page
Query Builder