Skip to content
Threat Feed
Subscribe

Vendor

OpenCATS

3 briefs RSS
high advisory

OpenCATS 0.9.7.4 SQL Injection Vulnerability

A SQL Injection vulnerability exists in OpenCATS 0.9.7.4, with a published exploit that allows for database version and user extraction on unpatched systems.

OpenCATS 0.9.7.4 sqli webapps opencats
2r 1t
critical threat

OpenCATS 0.9.4 Remote Code Execution Vulnerability (CVE-2021-47936)

OpenCATS 0.9.4 is vulnerable to remote code execution (CVE-2021-47936) allowing unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files disguised as resume attachments through the careers job application endpoint, leading to potential system compromise.

OpenCATS 0.9.4 CVE-2021-47936 rce opencats vulnerability
2r 2t 1c
critical advisory

OpenCATS PHP Code Injection Vulnerability (CVE-2026-27760)

Unauthenticated attackers can exploit a PHP code injection vulnerability in OpenCATS versions prior to commit 3002a29 by injecting malicious PHP code into the installer's AJAX endpoint, leading to arbitrary code execution.

OpenCATS code-injection php cve-2026-27760
2r 1t 1c