NetCat (Site Management System)

NetCat's professional site management system is one of the leading domestic site management systems, allowing you to create websites of almost any level of complexity with maximum time savings and manage the created site without the need for knowledge of web technologies. The installation of NetCat on the hosting site takes several minutes, the development of the site (including complex functional elements) based on the system is accelerated several times, and a simple intuitive interface of the administration system will allow a user familiar with the computer to manage the site at the level of work in Microsoft Windows/Microsoft Office. NetCat runs over 15,000 web projects; The company's partner network has almost 1000 web studios in Russia and neighboring countries.

2025: Addressing Vulnerabilities

PT SWARM team experts Aleksei Solovyov and Yan Chizhevsky have identified multiple vulnerabilities in NetCat CMS. According to the developer company, more than 15 thousand portals operate on this site management system. Positive Technologies announced this on May 15, 2025.

A total of 23 vulnerabilities (BDU:2024-06382- BDU:2024-06404) were found with scores from 8.1 to 9.1 on the CVSS 3.0 scale, which means high and critically high levels of danger, respectively.

We found the ability to conduct attacks cross-site scripting (XSS) in various NetCat CMS modules. This could allow an attacker to conduct an XSS attack on the system administrator and use a legitimate set of CMS functions to execute arbitrary code on the server, gain access source code to the application, database and gain a foothold for subsequent attacks on the system owner company. In addition, we found vulnerabilities "Implementation - SQL code," in particular BDU:2024-06394. NetCat CMS allows users to create dynamic rights, so an attacker with access to a vulnerable module could elevate his privileges and gain full access to the database for further development of the attack, "said Aleksei Solovyov, head of the expertise group of the web application security analysis department, Positive Technologies.

In the fall of 2024, the number of vulnerable and accessible from the NetCat CMS global installation network, according to PT Expert Security Center experts, was more than 200. Most of them are located in Russia (92.9%).

𝓲

Фото: Positive Technologies

2013

NetCat 5.2

On June 25, 2013, the company introduced a new version of CMS NetCat 5.2.

Novelties

The main innovation in this version is the ability to quickly develop two new types of sites:

• Longpage - a site consisting of one long page with a sequential structure
• Shortpage - a site whose content is displayed in one screen, and navigation through sections is carried out without reloading pages.

Structure

NetCat 5.2 includes not only functionality that helps to create such sites in a few minutes, but also ready-made solutions of these types.

Design

NetCat 5.2 is presented with a new design of the main page of the administrative part.

Inline Availability

NetCat 5.2 has the ability to inline content editing. Now it is enough to "click" in the right place of the text and make changes.

NetCat 5.1

Important changes were made to the layout of the interface of the administrative part of the system and the quick editing panel, as a result of which its conflict resistance was increased.

Another key innovation affected the'Site Search' module - NetCat 5.1 introduced a new index storage mechanism, which significantly reduced the load on hosting.

In addition:

• increased system security;
• updated the modules' Online Store ',' Minimagazine ',' Subscription and Distribution ';
• improved unloading from 1C;
• the functionality of widgets has been expanded.

The complete list of changes and additions to NetCat 5.1 has more than 100 points. All of them were included in Friday Build weekly patches, each of which was tested by the company's partners. In total, 14 such patches were released during testing.

2012: NetCat 5.0

On August 1, 2012, NetCat introduced a new, fifth version of a professional site management system that allows you to create websites of any level of complexity. The company released the first version of its system in 1999. The company's partner network has more than 1,700 web developers in Russia and the CIS, and more than 16 thousand sites have been created and operate on CMS NetCat. According to analysts, the company owns about 15% of the domestic CMS market.

According to the company's specialists, the NetCat system is suitable for the vast majority of web projects, regardless of profile or type: from simple "business cards" with minimal content to complex web systems, online stores, etc. Moreover, even an unprepared user who does not know programming languages ​ ​ and Internet technologies can manage a NetCat-based site. In total, six standard system configurations are offered, formed taking into account the necessary functionality of each type of site.

The company began work on NetCat 5 at the end of 2011. One of the innovations was the interface that replaced the former, which lasted five years. For the new interface, the Metro UI style was chosen, to which there is a keen interest. Now it is a kind of hit for interface developers. The founder of the style is Microsoft, which began to use it before the corresponding announcement took place. Microsoft developers apply this style to applications and Windows 8.

The essence of Metro is not to overload the interface with unnecessary details and functions. The main principle of this style is to be understandable to the user. The idea is based on how in various cities around the world signs help people navigate and find what they need.

The style of Metro is as follows - the content itself is a design. That is, beautiful text in rich colors simultaneously plays the role of an image, bringing beauty to the design of the site. One of the hallmarks of Metro Style is the presence of animation that helps the user navigate what happens in the application and how. In addition, the user can "move" between interface elements, as in the map, if it were on the screen. The menu is made in the form of cards in the file cabinet. The design also provides for the ease of use of the system on touch screen devices.

Another innovation of the fifth version is the ability to integrate with third-party software - 1C systems, social networks, etc.

Developers and customers are also offered a library of ready-made solutions that can be easily adapted for specific applications. This is convenient for the rapid start of the business of companies, in addition, saves them from the costs of a unique design.

It is important for web project developers (this system is primarily addressed to them) that NetCat 5 has a new architecture that is compatible with previous versions. New convenient functions: auto-betting, the ability to see the result immediately in the development process. Also available on the NetCat website is new, completely rewritten, system documentation.