397 matches found
OpenCats: Input validation vulnerability
OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version 0.9.6, which stems from an open redirection vulnerability due to improper validation of user-supplied parameters...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
OpenCats cross-site scripting vulnerabilities
steal is StealJS open source an extensible general-purpose module loader . It can load JavaScript modules defined in ES6, AMD and CommonJS formats. A security vulnerability exists in OpenCats version 0.9.6 that stems from improper input neutralization and can be exploited by an attacker to steal...
PT-2023-21054 · Opencats · Opencats
Name of the Vulnerable Software and Affected Versions: OpenCATS affected versions not specified Description: The issue is related to an open redirect vulnerability that exposes OpenCATS to template injection. This occurs due to improper validation of user-supplied GET parameters. Recommendations:...
CVE-2023-27295
OpenCATS suffers a Cross-Site Request Forgery due to failure to require CSRF tokens on POST requests. An attacker can create a page that executes JavaScript within an authenticated user’s session. Multiple sources (e.g., CNNVD citing OpenCATS 0.9.6) corroborate the CSRF issue, but no concrete rem...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
CVE-2022-48012
Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...
CVE-2022-48011
Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function...
CVE-2022-48013
Opencats v0.9.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /opencats/index.php?m=calendar. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description or Title text fields...
Cross site scripting
Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...
Sql injection
Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function...
Cross site scripting
Opencats v0.9.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /opencats/index.php?m=calendar. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description or Title text fields...
CVE-2022-48012
Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...
PT-2023-15549
Name of the Vulnerable Software and Affected Versions Opencats version 0.9.7 Description A reflected cross-site scripting XSS issue was found in Opencats via the component "/opencats/index.php?m=settings&a=ajax tags upd". This allows for potential XSS attacks. Recommendations For Opencats version...
CVE-2022-48011
Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function...
OpenCats SQL injection vulnerability
OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.7, which stems from the importID parameter of its Import viewerrors function that allows an attacker to implement SQL injection...
CVE-2022-48012: Improper Neutralization of Input During Web Page Generation
Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...
PT-2023-15548
Name of the Vulnerable Software and Affected Versions Opencats version 0.9.7 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the importID parameter in the viewerrors function of the Import module. Recommendations For Opencats version 0.9....
CVE-2022-48012
OpenCATS v0.9.7 contains a reflected XSS in the component /opencats/index.php?m=settings&a=ajax_tags_upd. Affected functionality allows an attacker to inject arbitrary JavaScript into a victim’s browser, potentially stealing cookies or hijacking sessions. Impact is described as client-side code e...