CVE-2019-13358

Mô tả

Tham khảo

• packetstormsecurity.com/files/164253/OpenCats-0.9.4-2-XML-Injection.html · Exploit
• opencats.org/news · Release Notes
• doddsecurity.com/312/xml-external-entity-injection-xxe-in-opencats-applicant-tracking-system · Exploit
• opencats/OpenCATS#440 · Issue Tracking

Lỗ hổng khác của opencats

• CVE-2023-26847TRUNG BÌNH 5.4A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted…
• CVE-2023-26846TRUNG BÌNH 5.4A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted…
• CVE-2023-26845TRUNG BÌNH 4.3A Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors.
• CVE-2023-27295TRUNG BÌNH 5.4Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by…
• CVE-2023-27294TRUNG BÌNH 5.4Improper neutralization of input during web page generation allows an authenticated attacker with access to a restricted account to submit m…