OpenCats SQL注入漏洞

OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the tagid variable in the tag delete function. No detailed vulnerability details are provided at this time...

OpenCats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can utilize its callback component to implement reflective cross-site scripting. No detailed vulnerability details are available...

CVE-2022-43014

OpenCATS v0.9.6 contains a reflected cross-site scripting (XSS) vulnerability in the joborderID parameter. An attacker can inject arbitrary script into the victim’s browser context, potentially stealing cookie-based authentication credentials and enabling further attacks. Practical impact include...

CVE-2022-43016

OpenCATS 0.9.6 contains a reflected XSS vulnerability in the callback component. An attacker could inject arbitrary JavaScript into a user’s browser within the OpenCATS site context, potentially stealing cookie-based credentials and enabling further attacks. The issue is documented across multipl...

OpenCats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can implement reflective cross-site scripting using its joborderID parameter. No detailed vulnerability details are available at...

CVE-2022-43016

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the callback component...

CVE-2022-43017

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the indexFile component...

PT-2022-26702 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A reflected cross-site scripting XSS issue was found, which can be exploited via the entriesPerPage parameter. Recommendations: For OpenCATS version 0.9.6, avoid using the entriesPerPage parameter until a f...

CVE-2022-43015

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...

OpenCats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can implement reflective cross-site scripting using its entriesPerPage parameter. No detailed vulnerability details are availabl...

CVE-2022-43014

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the joborderID parameter...

OpenCats SQL注入漏洞

OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the importID parameter in the Import viewerrors function. No detailed vulnerability details are available at this time...

PT-2022-26706 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A SQL injection issue was found in the Tag deletion function via the tag id variable. Recommendations: For OpenCATS version 0.9.6, consider restricting access to the Tag deletion function until a patch is...

CVE-2022-43023

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function...

CVE-2022-43021

OpenCATS v0.9.6 is affected by a SQL injection via the entriesPerPage parameter. Affected component: OpenCATS ATS core data handling; root cause: unsafeguarded handling of the entriesPerPage input enabling arbitrary SQL behavior. Impact per sources: potential confidentiality loss (C), with no evi...

PT-2022-26705 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A SQL injection issue was found in OpenCATS via the entriesPerPage variable. This allows for potential exploitation. Recommendations: For OpenCATS version 0.9.6, avoid using the entriesPerPage variable unti...

CVE-2022-43022

OpenCATS v0.9.6 contains a SQL injection vulnerability in the Tag deletion function exposed via the tag_id variable. This affects the application’s ability to securely handle tag deletion requests and could lead to unauthorized data access or manipulation, depending on the attacker’s input. The i...

CVE-2022-43018

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the email parameter in the Check Email function...

EUVD-2022-46068

OpenCATS v0.9.6 was discovered to contain a remote code execution RCE vulnerability via the getDataGridPager's ajax functionality...

CVE-2022-43019

CVE-2022-43019 : OpenCats/OpenCATS v0.9.6 has a remote code execution (RCE) flaw via the getDataGridPager AJAX function. The issue affects the OpenCATS web UI component and is described as a vulnerable path in the AJAX handling, leading to high-impact impact (CVE indicates CRITICAL, network acces...