Cross site scripting

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the email parameter in the Check Email function...

Sql injection

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag update function...

Remote code execution

OpenCATS v0.9.6 was discovered to contain a remote code execution RCE vulnerability via the getDataGridPager's ajax functionality...

CVE-2022-43015

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...

CVE-2022-43018

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the email parameter in the Check Email function...

CVE-2022-43020

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag update function...

CVE-2022-43023

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function...

CVE-2022-43016

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the callback component...

CVE-2022-43019

OpenCATS v0.9.6 was discovered to contain a remote code execution RCE vulnerability via the getDataGridPager's ajax functionality...

CVE-2022-43017

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the indexFile component...

PT-2022-26707 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A SQL injection issue was found in the Import viewerrors function via the importID parameter. Recommendations: For OpenCATS version 0.9.6, avoid using the importID parameter in the Import viewerrors functio...

CVE-2022-43015

OpenCATS v0.9.6 contains a reflected cross-site scripting (XSS) vulnerability exploitable via the entriesPerPage parameter. An attacker can inject arbitrary JavaScript code that runs in a user’s browser, potentially stealing cookies or performing actions in the user’s context. The issue is tied t...

CVE-2022-43020

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag update function...

OpenCats SQL注入漏洞

OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the tagid variable in the tag update function. No detailed vulnerability details are provided at this time...

CVE-2022-43021

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable...

CVE-2022-43018

OpenCATS v0.9.6 is affected by a reflected XSS in the Check Email function via the email parameter. The root cause is insufficient input validation, allowing an attacker to inject script in a user’s browser and potentially steal session cookies. Documented impacts include cookie theft and related...

CVE-2022-43020

CVE-2022-43020 concerns OpenCATS v0.9.6 with a SQL injection in the tag_id variable within the Tag update function. The CVE entry notes a network-exposed vulnerability with Low attack complexity and Low privileges required, but no user interaction, and it has a High impact on confidentiality (C: ...

CVE-2022-43022

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag deletion function...

OpenCats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which originates from an attacker being able to implement reflective cross-site scripting using its indexFile component. Currently there is no detailed vulnerability detai...

OpenCats SQL注入漏洞

OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the entriesPerPage variable. No details of the vulnerability are provided at this time...