148 matches found
CVE-2021-35369
Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filteringgetcontents function...
CVE-2021-35370
An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function...
CVE-2021-35370
An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function...
CVE-2021-35370
CVE-2021-35370 affects Peacexie Imcat v5.4. The issue is described as an arbitrary code execution via the incomplete filtering function in Imcat. Public references across NVD, Red Hat, OSV, CNVD/CNNVD, CVE lists, and vuln enrichment confirm this vulnerability. The CVE’s exploitation potential is ...
CVE-2021-36444
Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...
CVE-2021-36443
Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...
CVE-2021-36444
Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...
CVE-2021-36443
Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...
Cross site request forgery (csrf)
Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...
PT-2023-12275 · Imcat · Imcat
Name of the Vulnerable Software and Affected Versions: imcat version 5.4 Description: The issue allows remote attackers to escalate privilege via a lack of token verification, which is a result of a Cross Site Request Forgery vulnerability. Recommendations: For imcat version 5.4, consider...
imcat 跨站请求伪造漏洞
Imcat is a PHP-based open source website building system. A security vulnerability exists in version 5.4 of imcat, which stems from the presence of cross-site request forgery, which can be exploited by a remote attacker to elevate privileges through the lack of token authentication...
CVE-2021-36443
Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...
CVE-2021-36443
CVE-2021-36443 affects imcat 5.4 and is a Cross Site Request Forgery vulnerability that enables privilege escalation due to lack of token verification. The issue is documented across multiple sources (NVD/Red Hat/CVE.org/CNNVDOSV), with CVSS v3.1 base score 8.8 (HIGH) and attack vector NETWORK, u...
imcat 跨站请求伪造漏洞
Imcat is a PHP-based open source website building system . The imcat 5.4 version has a security vulnerability, the vulnerability stems from the existence of cross-site request forgery CSRF, remote attackers can use this vulnerability to obtain elevation of privilege by generating a one-time token...
CVE-2021-36444
Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...
CVE-2021-36444
CVE-2021-36444 affects imcat 5.4, with a CSRF flaw on the add administrator page due to a flawed one-time token generation. This can allow remote attackers to escalate privileges. The advisory notes a PoC exists; no in-the-wild exploit status is confirmed in the provided records. APT-style remedi...
CVE-2021-36443
Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...