CVE-2021-35370

An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function...

Imcat 安全漏洞

Imcat is a PHP-based open source website builder. A security vulnerability exists in Peacexie Imcat version v.5.4, which stems from a vulnerability that allows an attacker to execute arbitrary code via an incomplete filtering function...

CVE-2021-35369

Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filteringgetcontents function...

Imcat 安全漏洞

Imcat is a PHP-based open source website builder. A security vulnerability exists in Peacexie Imcat version v.5.2, which originated from allowing an attacker to obtain sensitive information via the filteringgetcontents function...

CVE-2021-36443

Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...

CVE-2021-36444

Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...

CVE-2021-36443

Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...

CVE-2021-36444

Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...

Cross site request forgery (csrf)

Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...

CVE-2021-36443

Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...

CVE-2021-36444

Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...

imcat 跨站请求伪造漏洞

Imcat is a PHP-based open source website building system . The imcat 5.4 version has a security vulnerability, the vulnerability stems from the existence of cross-site request forgery CSRF, remote attackers can use this vulnerability to obtain elevation of privilege by generating a one-time token...

imcat 跨站请求伪造漏洞

Imcat is a PHP-based open source website building system. A security vulnerability exists in version 5.4 of imcat, which stems from the presence of cross-site request forgery, which can be exploited by a remote attacker to elevate privileges through the lack of token authentication...

CVE-2021-36443

CVE-2021-36443 affects imcat 5.4 and is a Cross Site Request Forgery vulnerability that enables privilege escalation due to lack of token verification. The issue is documented across multiple sources (NVD/Red Hat/CVE.org/CNNVDOSV), with CVSS v3.1 base score 8.8 (HIGH) and attack vector NETWORK, u...

PT-2023-12275 · Imcat · Imcat

Name of the Vulnerable Software and Affected Versions: imcat version 5.4 Description: The issue allows remote attackers to escalate privilege via a lack of token verification, which is a result of a Cross Site Request Forgery vulnerability. Recommendations: For imcat version 5.4, consider...

CVE-2021-36443

Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...

CVE-2021-36444

CVE-2021-36444 affects imcat 5.4, with a CSRF flaw on the add administrator page due to a flawed one-time token generation. This can allow remote attackers to escalate privileges. The advisory notes a PoC exists; no in-the-wild exploit status is confirmed in the provided records. APT-style remedi...

CVE-2021-36444

Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...

CVE-2020-22120

A remote code execution RCE vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code...