Aggregates CVE and security vulnerability intelligence across all txjia-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk path handling and vendor risk sql injection and related problems; some flaws may lead to vendor impact application crash, affecting vendor surface production workloads scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2021-35370 | An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function. | [email protected] | 9.8 | 3.90% | 2023-02-24 | 2025-03-12 |
| CVE-2021-35369 | Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get_contents function. | [email protected] | 6.5 | 0.23% | 2023-02-24 | 2025-03-12 |
| CVE-2021-36444 | Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page. | [email protected] | 8.8 | 0.19% | 2023-02-03 | 2025-03-26 |
| CVE-2021-36443 | Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification. | [email protected] | 8.8 | 0.19% | 2023-02-03 | 2025-03-26 |
| CVE-2020-22120 | A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code. | [email protected] | 8.8 | 3.01% | 2021-08-18 | 2024-11-21 |
| CVE-2020-20392 | SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php. | [email protected] | 9.8 | 0.76% | 2021-06-23 | 2024-11-21 |
| CVE-2020-23520 | imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality. | [email protected] | 7.2 | 2.52% | 2020-12-09 | 2024-11-21 |
| CVE-2019-14968 | An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action. | [email protected] | 9.8 | 0.26% | 2019-08-12 | 2024-11-21 |
| CVE-2019-8436 | imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter. | [email protected] | 5.4 | 0.18% | 2019-02-18 | 2024-11-21 |
| CVE-2018-20611 | imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI. | [email protected] | 6.1 | 0.21% | 2018-12-30 | 2024-11-21 |
| CVE-2018-20610 | imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter. | [email protected] | 4.9 | 1.09% | 2018-12-30 | 2024-11-21 |
| CVE-2018-20609 | imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI. | [email protected] | 5.3 | 3.43% | 2018-12-30 | 2024-11-21 |
| CVE-2018-20608 | imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI. | [email protected] | 7.5 | 63.56% | 2018-12-30 | 2024-11-21 |
| CVE-2018-20607 | imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI. | [email protected] | 5.3 | 3.43% | 2018-12-30 | 2024-11-21 |
| CVE-2018-20606 | imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI. | [email protected] | 7.5 | 7.03% | 2018-12-30 | 2024-11-21 |
| CVE-2018-20605 | imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file. | [email protected] | 9.8 | 0.99% | 2018-12-30 | 2024-11-21 |