Design/Logic Flaw

imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI...