CVE-2020-23520

imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality...

CVE-2020-20392

SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...

CVE-2019-8436

imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...

CVE-2018-20610

imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...

CVE-2018-20607

imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI...

CVE-2018-20606

imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr=Pcoln= URI...

CVE-2018-20609

imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...

CVE-2018-20605

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...

CVE-2018-20611

imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI...

CVE-2019-14968

An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action...

CVE-2018-20608

imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI...

CVE-2021-35369

Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filteringgetcontents function...

CVE-2021-35369

Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filteringgetcontents function...

CVE-2021-35370

An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function...

Design/Logic Flaw

Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filteringgetcontents function...

Design/Logic Flaw

An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function...

CVE-2021-35370

An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function...

CVE-2021-35370

CVE-2021-35370 affects Peacexie Imcat v5.4. The issue is described as an arbitrary code execution via the incomplete filtering function in Imcat. Public references across NVD, Red Hat, OSV, CNVD/CNNVD, CVE lists, and vuln enrichment confirm this vulnerability. The CVE’s exploitation potential is ...

CVE-2021-35369

CVE-2021-35369 affects Peacexie ImCat, with an Arbitrary File Read vulnerability in v5.2 that is fixed in v5.4. The issue is triggered via the filtering_get_contents function, allowing an attacker to obtain sensitive information. Affected component: ImCat PHP-based product; root cause and exact e...

CVE-2021-35369

Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filteringgetcontents function...