EUVD-2022-46070

Malicious code in bioql PyPI...

EUVD-2022-46064

Malicious code in bioql PyPI...

CVE-2022-42744: Improper Neutralization of Special Elements used in an SQL Command

CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is possible because the application does not correctly validate the entriesPerPage parameter against SQLi attacks...

OpenCats SQL Injection Vulnerability

OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the entriesPerPage variable. No details of the vulnerability are provided at this time...

CVE-2022-43015

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...

CVE-2022-43021

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...

Sql injection

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...

Cross site scripting

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...

PT-2022-26702 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A reflected cross-site scripting XSS issue was found, which can be exploited via the entriesPerPage parameter. Recommendations: For OpenCATS version 0.9.6, avoid using the entriesPerPage parameter until a f...

CVE-2022-43021: Improper Neutralization of Special Elements used in an SQL Command

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...

CVE-2022-43015

OpenCATS v0.9.6 contains a reflected cross-site scripting (XSS) vulnerability exploitable via the entriesPerPage parameter. An attacker can inject arbitrary JavaScript code that runs in a user’s browser, potentially stealing cookies or performing actions in the user’s context. The issue is tied t...

OpenCats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can implement reflective cross-site scripting using its entriesPerPage parameter. No detailed vulnerability details are availabl...

CVE-2022-43021

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...

CVE-2022-43015

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...

CVE-2022-43015

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...

CVE-2022-43015: Improper Neutralization of Input During Web Page Generation

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...