824 matches found
Code injection
imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...
Design/Logic Flaw
imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI...
CVE-2018-20611
imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI...
CVE-2018-20610
imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...
CVE-2018-20611
imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI...
CVE-2018-20607
imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI...
CVE-2018-20609
imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...
CVE-2018-20608
imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI...
CVE-2018-20606
imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI...
CVE-2018-20605
imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...
CVE-2018-20607
imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI...
CVE-2018-20608
imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI...
CVE-2018-20606
imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI...
CVE-2018-20605
imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...
CVE-2018-20609
imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...
CVE-2018-20608
Imcat 4.4 has an information-disclosure vulnerability: remote attackers can read phpinfo output via the path root/tools/adbug/binfo.php?phpinfo1, exposing server configuration details. Root cause is an insecure exposure of phpinfo in that URI. Impact is information leakage (CVE-2018-20608). Remed...
CVE-2018-20605
CVE-2018-20605 affects imcat 4.4. An attacker can remotely execute arbitrary PHP code by exploiting root/run/adm.php to modify boot/bootskip.php, enabling code execution with high impact. The vulnerability is documented across multiple feeds (NVD, RH, CNVD, OSV, etc.) with the same flaw descripti...
CVE-2018-20609
CVE-2018-20609 affects imcat 4.4. The vulnerability is an information disclosure: remote attackers can obtain potentially sensitive configuration information through the root/tools/adbug/check.php URI. Connected sources corroborate this description across multiple repositories (NVD, Red Hat, CNVD...
CVE-2018-20607
CVE-2018-20607 describes an information-disclosure vulnerability in imcat 4.4 , where remote attackers can obtain potentially sensitive debugging information via the URI root/tools/adbug/binfo.php . The connected documents consistently identify this URI as the disclosure point, indicating a parti...