Sql injection

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function...

Sql injection

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag update function...

Cross site scripting

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the callback component...

Remote code execution

OpenCATS v0.9.6 was discovered to contain a remote code execution RCE vulnerability via the getDataGridPager's ajax functionality...

Cross site scripting

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...

CVE-2022-43016

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the callback component...

CVE-2022-43017

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the indexFile component...

CVE-2022-43023

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function...

OpenCats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can utilize its callback component to implement reflective cross-site scripting. No detailed vulnerability details are available...

PT-2022-26706 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A SQL injection issue was found in the Tag deletion function via the tag id variable. Recommendations: For OpenCATS version 0.9.6, consider restricting access to the Tag deletion function until a patch is...

CVE-2022-43014

OpenCATS v0.9.6 contains a reflected cross-site scripting (XSS) vulnerability in the joborderID parameter. An attacker can inject arbitrary script into the victim’s browser context, potentially stealing cookie-based authentication credentials and enabling further attacks. Practical impact include...

CVE-2022-43015

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...

CVE-2022-43014

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the joborderID parameter...

EUVD-2022-46068

OpenCATS v0.9.6 was discovered to contain a remote code execution RCE vulnerability via the getDataGridPager's ajax functionality...

PT-2022-26707 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A SQL injection issue was found in the Import viewerrors function via the importID parameter. Recommendations: For OpenCATS version 0.9.6, avoid using the importID parameter in the Import viewerrors functio...

CVE-2022-43018

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the email parameter in the Check Email function...

CVE-2022-43018

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the email parameter in the Check Email function...

CVE-2022-43020

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag update function...

CVE-2022-43019

CVE-2022-43019 : OpenCats/OpenCATS v0.9.6 has a remote code execution (RCE) flaw via the getDataGridPager AJAX function. The issue affects the OpenCATS web UI component and is described as a vulnerable path in the AJAX handling, leading to high-impact impact (CVE indicates CRITICAL, network acces...

PT-2022-26702 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A reflected cross-site scripting XSS issue was found, which can be exploited via the entriesPerPage parameter. Recommendations: For OpenCATS version 0.9.6, avoid using the entriesPerPage parameter until a f...