CVE-2018-20605

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1000%

EPSS Percentile5.07th

Published2018年12月30日

Last Modified2024年11月21日

Vulnerability Description

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file.

📦

Txjia

= 4.4

SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.

An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.

An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action.

A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attacker...