Vulnerabilities > Txjia > Imcat > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-02-24 CVE-2021-35369 Unspecified vulnerability in Txjia Imcat 5.2/5.3
Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get_contents function.
network
low complexity
txjia
6.5
2019-02-18 CVE-2019-8436 Cross-site Scripting vulnerability in Txjia Imcat 4.5
imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.
network
low complexity
txjia CWE-79
5.4
2018-12-30 CVE-2018-20611 Cross-site Scripting vulnerability in Txjia Imcat 4.4
imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.
network
low complexity
txjia CWE-79
6.1
2018-12-30 CVE-2018-20610 Path Traversal vulnerability in Txjia Imcat 4.4
imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter.
network
low complexity
txjia CWE-22
4.9
2018-12-30 CVE-2018-20609 Information Exposure vulnerability in Txjia Imcat 4.4
imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI.
network
low complexity
txjia CWE-200
5.3
2018-12-30 CVE-2018-20607 Information Exposure vulnerability in Txjia Imcat 4.4
imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI.
network
low complexity
txjia CWE-200
5.3