peacexie/imcat

peacexie/imcat

GitHubGitHub
GitHubgithub.com
imcat.txjia.comimcat.txjia.com
Releases18
Frequency1 month 2 weeks
Last Release
Stars19
Imcat(贴心猫) is a set of Light weight, Free, Sharing general PHP web application system!
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-35369↗
6.5 MEDIUM—

Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get_contents function.

CVE-2021-35370↗
9.8 CRITICAL—

An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.

CVE-2021-36443↗
8.8 HIGH—

Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification.

CVE-2021-36444↗
8.8 HIGH—

Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page.

CVE-2020-22120↗
8.8 HIGH6.5 MEDIUM

A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code.

CVE-2020-20392↗
9.8 CRITICAL7.5 HIGH

SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.

CVE-2020-23520↗
7.2 HIGH6.5 MEDIUM

imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality.

CVE-2019-14968↗
—7.5 HIGH

An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action.

CVE-2019-8436↗
—3.5 LOW

imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.