imcat Arbitrary PHP Code Execution Vulnerability

imcat is a PHP-based open source website building system . A security vulnerability exists in imcat version 4.4. Remote attackers can use root/run/adm.php file to modify the boot/bootskip.php file to exploit the vulnerability to execute arbitrary PHP code...

Code injection

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...

CVE-2018-20605: Improper Control of Generation of Code

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...

PT-2018-15469

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by modifying the boot/bootskip.php file using the root/run/adm.php endpoint. Recommendations For imcat version 4.4, consider...