Vulnerability index

Browse CVEs

15 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Imcat CRITICAL 9.8
CVE-2021-35370

An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.

No fix yet
Fix from $2,300 2023-02-24
Imcat MEDIUM 6.5
CVE-2021-35369

Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get…

Patch available
Fix from $1,600 2023-02-24
Imcat HIGH 8.8
CVE-2021-36443

Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification.

No fix yet
Fix from $1,950 2023-02-03
Imcat HIGH 8.8
CVE-2021-36444

Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation…

No fix yet
Fix from $1,950 2023-02-03
Imcat HIGH 8.8
CVE-2020-22120

A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitr…

Patch available
Fix from $1,950 2021-08-18
Imcat CRITICAL 9.8
CVE-2020-20392

SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.

No fix yet
Fix from $2,300 2021-06-23
Imcat HIGH 7.2
CVE-2020-23520

imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality.

No fix yet
Fix from $1,950 2020-12-09
Imcat CRITICAL 9.8
CVE-2019-14968

An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action.

No fix yet
Fix from $2,300 2019-08-12
Imcat MEDIUM 5.4
CVE-2019-8436

imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.

No fix yet
Fix from $1,600 2019-02-18
Imcat CRITICAL 9.8
CVE-2018-20605

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file.

No fix yet
Fix from $2,300 2018-12-30
Imcat HIGH 7.5
CVE-2018-20606

imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI.

No fix yet
Fix from $1,950 2018-12-30
Imcat HIGH 7.5
CVE-2018-20608EPSS 12%

imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.

No fix yet
Fix from $1,950 2018-12-30
Imcat MEDIUM 6.1
CVE-2018-20611

imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.

No fix yet
Fix from $1,600 2018-12-30
Imcat MEDIUM 5.3
CVE-2018-20607

imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI.

No fix yet
Fix from $1,600 2018-12-30
Imcat MEDIUM 5.3
CVE-2018-20609

imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI.

No fix yet
Fix from $1,600 2018-12-30