hansmach1ne/opencats_zero-days

GitHub

github.com

Unavailable

This project is no longer available (or publicly accessible) from GitHub

Releases0

Vulnerabilities found in OpenCats applicant tracking system

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-43023 ↗	Oct 19, 2022Wednesday, 19 October 2022, 18:15	6.5 MEDIUM	—
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function.
CVE-2022-43014 ↗	Oct 19, 2022Wednesday, 19 October 2022, 18:15	6.1 MEDIUM	—
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborderID parameter.
CVE-2022-43015 ↗	Oct 19, 2022Wednesday, 19 October 2022, 18:15	6.1 MEDIUM	—
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the entriesPerPage parameter.
CVE-2022-43016 ↗	Oct 19, 2022Wednesday, 19 October 2022, 18:15	6.1 MEDIUM	—
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback component.
CVE-2022-43017 ↗	Oct 19, 2022Wednesday, 19 October 2022, 18:15	6.1 MEDIUM	—
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the indexFile component.
CVE-2022-43018 ↗	Oct 19, 2022Wednesday, 19 October 2022, 18:15	6.1 MEDIUM	—
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the email parameter in the Check Email function.
CVE-2022-43019 ↗	Oct 19, 2022Wednesday, 19 October 2022, 18:15	9.8 CRITICAL	—
OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the getDataGridPager's ajax functionality.
CVE-2022-43020 ↗	Oct 19, 2022Wednesday, 19 October 2022, 18:15	6.5 MEDIUM	—
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag update function.
CVE-2022-43021 ↗	Oct 19, 2022Wednesday, 19 October 2022, 18:15	6.5 MEDIUM	—
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable.
CVE-2022-43022 ↗	Oct 19, 2022Wednesday, 19 October 2022, 18:15	6.5 MEDIUM	—
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag deletion function.