CVE-2018-20609: Exposure of Sensitive Information to an Unauthorized Actor

imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...

PT-2018-15472

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows remote attackers to read phpinfo output. This can be achieved via the "root/tools/adbug/binfo.php?phpinfo1" URI, which is an API endpoint. Recommendations For imcat version 4.4, consider restricti...

PT-2018-15475

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows for XSS via a crafted cookie to the "/tools/adbug/binfo.php?cookie" API endpoint. This can be exploited by manipulating the cookie variable. Recommendations For imcat version 4.4, as a temporary...

PT-2018-15471

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows remote attackers to obtain potentially sensitive debugging information. This is achieved via the "root/tools/adbug/binfo.php" API endpoint. Recommendations For imcat version 4.4, consider...

CVE-2018-20607: Exposure of Sensitive Information to an Unauthorized Actor

imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI...