OpenCats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can utilize its callback component to implement reflective cross-site scripting. No detailed vulnerability details are available...

PT-2022-26706 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A SQL injection issue was found in the Tag deletion function via the tag id variable. Recommendations: For OpenCATS version 0.9.6, consider restricting access to the Tag deletion function until a patch is...

CVE-2022-43021

OpenCATS v0.9.6 is affected by a SQL injection via the entriesPerPage parameter. Affected component: OpenCATS ATS core data handling; root cause: unsafeguarded handling of the entriesPerPage input enabling arbitrary SQL behavior. Impact per sources: potential confidentiality loss (C), with no evi...

CVE-2022-43020

CVE-2022-43020 concerns OpenCATS v0.9.6 with a SQL injection in the tag_id variable within the Tag update function. The CVE entry notes a network-exposed vulnerability with Low attack complexity and Low privileges required, but no user interaction, and it has a High impact on confidentiality (C: ...

CVE-2022-43021

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...

PT-2022-26707 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A SQL injection issue was found in the Import viewerrors function via the importID parameter. Recommendations: For OpenCATS version 0.9.6, avoid using the importID parameter in the Import viewerrors functio...

EUVD-2022-46068

OpenCATS v0.9.6 was discovered to contain a remote code execution RCE vulnerability via the getDataGridPager's ajax functionality...

CVE-2022-43014

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the joborderID parameter...

CVE-2022-43021

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...

CVE-2022-43017

OpenCATS v0.9.6 contains a reflected XSS vulnerability via the indexFile component. An attacker can inject arbitrary JavaScript in the victim’s browser, running in the site’s context and potentially exposing cookie-based credentials and enabling additional attacks. The issue arises from OpenCATS ...

CVE-2022-43016

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the callback component...

CVE-2022-43018

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the email parameter in the Check Email function...

CVE-2022-43023

CVE-2022-43023 affects OpenCATS v0.9.6 . A SQL injection vulnerability exists in the Import viewerrors function via the importID parameter. According to multiple sources, the CVSSv3.1 base score is 6.5 (MEDIUM) with network attack vector, low complexity, privileges required: LOW, no user interact...

CVE-2022-43019

CVE-2022-43019 : OpenCats/OpenCATS v0.9.6 has a remote code execution (RCE) flaw via the getDataGridPager AJAX function. The issue affects the OpenCATS web UI component and is described as a vulnerable path in the AJAX handling, leading to high-impact impact (CVE indicates CRITICAL, network acces...

CVE-2022-43020

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag update function...

CVE-2022-43015

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...

CVE-2022-43019

OpenCATS v0.9.6 was discovered to contain a remote code execution RCE vulnerability via the getDataGridPager's ajax functionality...

CVE-2022-43017

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the indexFile component...

CVE-2022-43018

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the email parameter in the Check Email function...

PT-2022-7072 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: The issue is related to a reflected cross-site scripting XSS vulnerability in the Check Email function of OpenCATS. This vulnerability can be exploited via the email parameter, potentially allowing a remote...