279 matches found
CVE-2022-43014
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the joborderID parameter...
PT-2022-26705 · Opencats · Opencats
Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A SQL injection issue was found in OpenCATS via the entriesPerPage variable. This allows for potential exploitation. Recommendations: For OpenCATS version 0.9.6, avoid using the entriesPerPage variable unti...
CVE-2022-43021
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...
OpenCats 跨站脚本漏洞
OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can implement reflective cross-site scripting using its joborderID parameter. No detailed vulnerability details are available at...
CVE-2022-43022
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag deletion function...
CVE-2022-43023
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function...
OpenCats SQL注入漏洞
OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the importID parameter in the Import viewerrors function. No detailed vulnerability details are available at this time...
OpenCats 代码问题漏洞
OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats v0.9.6, which stems from a security issue in the ajax function of getDataGridPager. No detailed vulnerability details are available at this time...
OpenCats SQL注入漏洞
OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the tagid variable in the tag delete function. No detailed vulnerability details are provided at this time...
CVE-2022-43022
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag deletion function...
CVE-2022-43015
OpenCATS v0.9.6 contains a reflected cross-site scripting (XSS) vulnerability exploitable via the entriesPerPage parameter. An attacker can inject arbitrary JavaScript code that runs in a user’s browser, potentially stealing cookies or performing actions in the user’s context. The issue is tied t...
CVE-2022-43023
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function...
CVE-2022-43019
OpenCATS v0.9.6 was discovered to contain a remote code execution RCE vulnerability via the getDataGridPager's ajax functionality...
CVE-2022-43017
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the indexFile component...
OpenCats 跨站脚本漏洞
OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can implement reflective cross-site scripting using its entriesPerPage parameter. No detailed vulnerability details are availabl...
CVE-2022-43016
OpenCATS 0.9.6 contains a reflected XSS vulnerability in the callback component. An attacker could inject arbitrary JavaScript into a user’s browser within the OpenCATS site context, potentially stealing cookie-based credentials and enabling further attacks. The issue is documented across multipl...
CVE-2022-43021
OpenCATS v0.9.6 is affected by a SQL injection via the entriesPerPage parameter. Affected component: OpenCATS ATS core data handling; root cause: unsafeguarded handling of the entriesPerPage input enabling arbitrary SQL behavior. Impact per sources: potential confidentiality loss (C), with no evi...
OpenCats 跨站脚本漏洞
OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which originates from an attacker being able to implement reflective cross-site scripting using its indexFile component. Currently there is no detailed vulnerability detai...
CVE-2022-43017
OpenCATS v0.9.6 contains a reflected XSS vulnerability via the indexFile component. An attacker can inject arbitrary JavaScript in the victim’s browser, running in the site’s context and potentially exposing cookie-based credentials and enabling additional attacks. The issue arises from OpenCATS ...