18 matches found
EUVD-2022-46070
Malicious code in bioql PyPI...
EUVD-2022-46064
Malicious code in bioql PyPI...
CVE-2022-42744: Improper Neutralization of Special Elements used in an SQL Command
CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is possible because the application does not correctly validate the entriesPerPage parameter against SQLi attacks...
OpenCats SQL Injection Vulnerability
OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the entriesPerPage variable. No details of the vulnerability are provided at this time...
CVE-2022-43015
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...
CVE-2022-43021
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...
Cross site scripting
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...
Sql injection
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...
CVE-2022-43021
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...
OpenCats cross-site scripting vulnerabilities
OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can implement reflective cross-site scripting using its entriesPerPage parameter. No detailed vulnerability details are availabl...
PT-2022-26702
Name of the Vulnerable Software and Affected Versions OpenCATS version 0.9.6 Description A reflected cross-site scripting XSS issue was found, which can be exploited via the entriesPerPage parameter. Recommendations For OpenCATS version 0.9.6, avoid using the entriesPerPage parameter until a fix ...
CVE-2022-43015: Improper Neutralization of Input During Web Page Generation
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...
CVE-2022-43021: Improper Neutralization of Special Elements used in an SQL Command
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...
CVE-2022-43021
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...
CVE-2022-43015
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...
CVE-2022-43015
OpenCATS v0.9.6 contains a reflected cross-site scripting (XSS) vulnerability exploitable via the entriesPerPage parameter. An attacker can inject arbitrary JavaScript code that runs in a user’s browser, potentially stealing cookies or performing actions in the user’s context. The issue is tied t...
