EUVD-2019-17826

Malware in sbrugna...

CVE-2018-20610

imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...

CVE-2020-22120

A remote code execution RCE vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code...

CVE-2020-22120: Improper Control of Generation of Code

A remote code execution RCE vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code...

PT-2019-19036

Name of the Vulnerable Software and Affected Versions imcat version 4.5 Description The issue is related to Stored XSS, which occurs via the "root/run/adm.php" API endpoint, specifically through the fminstopnote parameter. Recommendations For imcat version 4.5, avoid using the fminstopnote...

CVE-2019-8436: Improper Neutralization of Input During Web Page Generation

imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...

CVE-2019-8436

imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...

imcat Arbitrary PHP Code Execution Vulnerability

imcat is a PHP-based open source website building system . A security vulnerability exists in imcat version 4.4. Remote attackers can use root/run/adm.php file to modify the boot/bootskip.php file to exploit the vulnerability to execute arbitrary PHP code...

imcat directory traversal vulnerability

imcat is a PHP-based open source website building system . A directory traversal vulnerability exists in the root/run/adm.php file in imcat version 4.4. No detailed vulnerability details are available at this time...

Code injection

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...

CVE-2018-20605

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...

CVE-2018-20605

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...

CVE-2018-20605

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...

CVE-2018-20610

imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...

CVE-2018-20605

CVE-2018-20605 affects imcat 4.4. An attacker can remotely execute arbitrary PHP code by exploiting root/run/adm.php to modify boot/bootskip.php, enabling code execution with high impact. The vulnerability is documented across multiple feeds (NVD, RH, CNVD, OSV, etc.) with the same flaw descripti...

CVE-2018-20605: Improper Control of Generation of Code

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...

CVE-2018-20610: Improper Limitation of a Pathname to a Restricted Directory

imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...

PT-2018-15469

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by modifying the boot/bootskip.php file using the root/run/adm.php endpoint. Recommendations For imcat version 4.4, consider...

PT-2018-15474

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows directory traversal via the efile parameter in the "root/run/adm.php" API endpoint. Recommendations For imcat version 4.4, consider restricting access to the efile parameter in the...

CVE-2007-0764: Undefined Security Weakness

Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP scripts via GIF86 header in a file in the uplf parameter, which can be later accessed via a relative pathname in the dir parameter in adm.php...