Skip to content
OpenAdvisories

Vendor

OpenCATS

14 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Critical 9.1

    OpenCATS: Authenticated RCE in the Import module

    OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import module in modules/import/ImportUI.php can preserve an uploaded file's original name for one import data type …

  • Critical 9.8

    OpenCATS 0.9.4 Remote Code Execution via Resume Upload

    OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files disguised as resume attachments. Attackers can upload PHP payloads through the careers job appli…