Skip to content
OpenAdvisories

Vendor

dianping

3 known vulnerabilities.

Products

cat 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-124506

    Dianping CAT Report hourlyReport.tag Model.getDomain cross site scripting

    A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This vulnerability affects the function Model.getDomain of the file WEB-INF/tags/hourlyReport.tag of the component Report Handler. The manipulation of the argument domain leads to cross site …

    dianping cat
  • Medium 4.3
    CVE-2026-124505

    Dianping CAT Login/Logout Handler.java Handler.redirect

    A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This affects the function Handler.redirect of the file Handler.java of the component Login/Logout. Executing a manipulation of the argument rtnUrl can lead to open redirect. The attack may be performe…

    dianping cat