185 matches found
CVE-2018-20610
imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...
CVE-2018-20610
The CVE-2018-20610 issue affects imcat 4.4, where a directory traversal vulnerability exists in the root/run/adm.php efile parameter. The root cause is improper handling of the efile input, enabling traversal to sensitive paths. Documented impact is limited to this traversal capability; no explic...
CVE-2018-20608
Imcat 4.4 has an information-disclosure vulnerability: remote attackers can read phpinfo output via the path root/tools/adbug/binfo.php?phpinfo1, exposing server configuration details. Root cause is an insecure exposure of phpinfo in that URI. Impact is information leakage (CVE-2018-20608). Remed...
CVE-2018-20608
imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI...
CVE-2018-20605
CVE-2018-20605 affects imcat 4.4. An attacker can remotely execute arbitrary PHP code by exploiting root/run/adm.php to modify boot/bootskip.php, enabling code execution with high impact. The vulnerability is documented across multiple feeds (NVD, RH, CNVD, OSV, etc.) with the same flaw descripti...
CVE-2018-20606
imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI...
CVE-2018-20607
imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI...
CVE-2018-20605
imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...
CVE-2018-20611
CVE-2018-20611 affects imcat 4.4 and is a reflected-style XSS vulnerability triggered by a crafted cookie sent to the URI root/tools/adbug/binfo.php?cookie. The known impact is cross-site scripting; documentation does not specify exact payloads, affected exact versions beyond 4.4, or exploitation...
CVE-2018-20611
imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI...
CVE-2018-20606
CVE-2018-20606 affects imcat version 4.4, with information disclosure through a full path reveal via the URI dev.php?tools-ipaddr&api=Pcoln&uip=. Multiple trusted sources (NVD, RH, CNVD, OSV, CVE lists) describe this as a path disclosure vulnerability with network access and no authentication, re...
CVE-2018-20611: Improper Neutralization of Input During Web Page Generation
imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI...
PT-2018-15474
Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows directory traversal via the efile parameter in the "root/run/adm.php" API endpoint. Recommendations For imcat version 4.4, consider restricting access to the efile parameter in the...
CVE-2018-20610: Improper Limitation of a Pathname to a Restricted Directory
imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...
CVE-2018-20608: Exposure of Sensitive Information to an Unauthorized Actor
imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI...
CVE-2018-20605: Improper Control of Generation of Code
imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...
PT-2018-15473
Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows remote attackers to obtain potentially sensitive configuration information. This is achieved via the "root/tools/adbug/check.php" API endpoint. Recommendations For imcat version 4.4, consider...
CVE-2018-20609: Exposure of Sensitive Information to an Unauthorized Actor
imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...
PT-2018-15475
Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows for XSS via a crafted cookie to the "/tools/adbug/binfo.php?cookie" API endpoint. This can be exploited by manipulating the cookie variable. Recommendations For imcat version 4.4, as a temporary...
PT-2018-15471
Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows remote attackers to obtain potentially sensitive debugging information. This is achieved via the "root/tools/adbug/binfo.php" API endpoint. Recommendations For imcat version 4.4, consider...