CVE-2018-20609

CVE-2018-20609 affects imcat 4.4. The vulnerability is an information disclosure: remote attackers can obtain potentially sensitive configuration information through the root/tools/adbug/check.php URI. Connected sources corroborate this description across multiple repositories (NVD, Red Hat, CNVD...

CVE-2018-20608

Imcat 4.4 has an information-disclosure vulnerability: remote attackers can read phpinfo output via the path root/tools/adbug/binfo.php?phpinfo1, exposing server configuration details. Root cause is an insecure exposure of phpinfo in that URI. Impact is information leakage (CVE-2018-20608). Remed...

CVE-2018-20611

CVE-2018-20611 affects imcat 4.4 and is a reflected-style XSS vulnerability triggered by a crafted cookie sent to the URI root/tools/adbug/binfo.php?cookie. The known impact is cross-site scripting; documentation does not specify exact payloads, affected exact versions beyond 4.4, or exploitation...

CVE-2018-20610

imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...

CVE-2018-20609

imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...

CVE-2018-20608

imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI...

CVE-2018-20607

imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI...

CVE-2018-20606

CVE-2018-20606 affects imcat version 4.4, with information disclosure through a full path reveal via the URI dev.php?tools-ipaddr&api=Pcoln&uip=. Multiple trusted sources (NVD, RH, CNVD, OSV, CVE lists) describe this as a path disclosure vulnerability with network access and no authentication, re...