148 matches found
Sql injection
An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action...
CVE-2019-14968
An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action...
CVE-2019-14968
CVE-2019-14968 affects imcat 4.9, with an SQL Injection vulnerability in the mod=faqs action via the index.php order parameter. Evidence from multiple sources (NVD, RH, CNVD, OSV) indicates a critical risk (CVSSv3 base 9.8, CRITICAL; CVSSv2 base 7.5, HIGH). The connected documents do not specify ...
CVE-2019-8436
imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...
CVE-2019-8436
imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...
CVE-2019-8436
imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...
CVE-2019-8436
CVE-2019-8436 affects imcat 4.5 and is caused by Stored XSS via the root/run/adm.php fm[instop][note] parameter. The connected sources consistently report this vulnerability without providing specific patch details or affected product revisions beyond imcat 4.5. The exploitation, scope, and remed...
imcat Information Disclosure Vulnerability
imcat is a PHP-based open source website building system . A security vulnerability exists in imcat version 4.4. Remote attackers can use root/tools/adbug/binfo.php URI to obtain sensitive debugging information...
imcat information disclosure vulnerability (CNVD-2019-00970)
imcat is a PHP-based open source website building system . A security vulnerability exists in imcat version 4.4. Remote attackers can use root/tools/adbug/check.php URI to obtain sensitive configuration information...
imcat directory traversal vulnerability
imcat is a PHP-based open source website building system . A directory traversal vulnerability exists in the root/run/adm.php file in imcat version 4.4. No detailed vulnerability details are available at this time...
imcat information disclosure vulnerability (CNVD-2019-00972)
imcat is a PHP-based open source website building system . A security vulnerability exists in imcat version 4.4. An attacker can exploit the vulnerability to leak the full path with ev.php?tools-ipaddr&api=Pcoln&uip= URI...
imcat Cross-Site Scripting Vulnerability
imcat is a PHP-based open source website building system . A cross-site scripting vulnerability exists in imcat version 4.4. Remote attackers can use this vulnerability to inject arbitrary Web script or HTML by sending a specially crafted cookie to root/tools/adbug/binfo.php?cookie URI...
imcat Information Disclosure Vulnerability (CNVD-2019-00971)
imcat is a PHP-based open source website building system . A security vulnerability exists in imcat version 4.4. Remote attackers can use root/tools/adbug/binfo.php?phpinfo1 URI to obtain information...
imcat Arbitrary PHP Code Execution Vulnerability
imcat is a PHP-based open source website building system . A security vulnerability exists in imcat version 4.4. Remote attackers can use root/run/adm.php file to modify the boot/bootskip.php file to exploit the vulnerability to execute arbitrary PHP code...
Information disclosure
imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI...
Design/Logic Flaw
imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...
Design/Logic Flaw
imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI...
Directory traversal
imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...