CVE-2026-49489

OpenCATS up to version 0.9.7.4 is affected by an SQL injection in the DataGrid sortDirection parameter, enabling an authenticated user to exfiltrate data via ajax/getDataGridPager.php. The underlying issue is a vulnerable sortDirection parameter that allows time-based blind injections, potentiall...

PT-2022-26703

Name of the Vulnerable Software and Affected Versions OpenCATS version 0.9.6 Description The issue is related to a remote code execution vulnerability. It affects the getDataGridPager functionality, specifically through its ajax functionality. Recommendations For OpenCATS version 0.9.6, as a...