EUVD-2019-17826

Malware in sbrugna...

CVE-2018-20610

imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...

CVE-2020-22120

A remote code execution RCE vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code...

CVE-2019-8436

imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...

PT-2019-19036

Name of the Vulnerable Software and Affected Versions imcat version 4.5 Description The issue is related to Stored XSS, which occurs via the "root/run/adm.php" API endpoint, specifically through the fminstopnote parameter. Recommendations For imcat version 4.5, avoid using the fminstopnote...

imcat directory traversal vulnerability

imcat is a PHP-based open source website building system . A directory traversal vulnerability exists in the root/run/adm.php file in imcat version 4.4. No detailed vulnerability details are available at this time...

CVE-2018-20610

imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...

PT-2018-15469

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by modifying the boot/bootskip.php file using the root/run/adm.php endpoint. Recommendations For imcat version 4.4, consider...

CVE-2018-20605: Improper Control of Generation of Code

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file...

CVE-2018-20610: Improper Limitation of a Pathname to a Restricted Directory

imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter...

PT-2018-15474

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows directory traversal via the efile parameter in the "root/run/adm.php" API endpoint. Recommendations For imcat version 4.4, consider restricting access to the efile parameter in the...