imcat SQL Injection Vulnerability

imcat intimate cat is a lightweight, free, shared general-purpose PHP web application. A SQL injection vulnerability exists in imcat version 5.2. An attacker can exploit this vulnerability by using the fmauser parameter in coms/addcoms.php to perform a SQL injection attack...

CVE-2020-20392

SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...

CVE-2020-20392

SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...

Sql injection

SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...

CVE-2020-20392

CVE-2020-20392 affects the imcat web app (v5.2). The vulnerability is a SQL injection via the fm[auser] parameter in coms/add_coms.php. Public sources describe the issue and its high/critical impact (CVSS v3.1: 9.8; v2: 7.5), but the connected documents do not provide concrete fixes, affected bui...

CVE-2020-20392

SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...

PT-2021-10488

Name of the Vulnerable Software and Affected Versions: imcat version 5.2 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the fmauser parameters in the "coms/add coms.php" API endpoint. Recommendations: For imcat version 5.2, consider restricting access ...

Imcat SQL injection vulnerability

imcat intimate cat is a lightweight, free, shared general-purpose PHP web application. A SQL injection vulnerability exists in imcat version 5.2. An attacker can exploit this vulnerability by using the fmauser parameter in coms/addcoms.php to perform a SQL injection attack...

CVE-2020-20392: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...

CVE-2010-4333: Improper Authentication

Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies...

PT-2010-5424

Name of the Vulnerable Software and Affected Versions Pointter PHP Micro-Blogging Social Network version 1.8 Description The issue allows remote attackers to bypass authentication and obtain administrative privileges. This is achieved by setting arbitrary values of the auser and apass cookies...

CVE-2010-4332: Improper Authentication

Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies...

PT-2010-5423

Name of the Vulnerable Software and Affected Versions Pointter PHP Content Management System version 1.0 Description The issue allows remote attackers to bypass authentication and obtain administrative privileges. This is achieved by setting arbitrary values of the auser and apass cookies...