Skip to content
Noroxi

txjia records

16 published records for vendor txjia.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2018-20605
    40Plan

    imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file.

    CriticalCVSS 9.8No exploitEPSS 2%

    txjia · imcatDec 30, 2018

  • CVE-2019-14968
    39Monitor

    An issue was discovered in imcat 4.9.

    CriticalCVSS 9.8No exploitEPSS 2%

    txjia · imcatAug 12, 2019

  • CVE-2020-20392
    39Monitor

    SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    txjia · imcatJun 23, 2021

  • CVE-2021-35370
    39Monitor

    An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.

    CriticalCVSS 9.8No exploitEPSS 1%

    txjia · imcatFeb 24, 2023

  • CVE-2020-22120
    36Monitor

    A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execu

    HighCVSS 8.8No exploitEPSS 2%

    txjia · imcatAug 18, 2021

  • CVE-2021-36444
    35Monitor

    Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token g

    HighCVSS 8.8No exploitEPSS 1%

    txjia · imcatFeb 3, 2023

  • CVE-2021-36443
    35Monitor

    Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification.

    HighCVSS 8.8No exploitEPSS 1%

    txjia · imcatFeb 3, 2023

  • CVE-2018-20608
    34Monitor

    imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.

    HighCVSS 7.5Proof of conceptEPSS 12%

    txjia · imcatDec 30, 2018

  • CVE-2018-20606
    31Monitor

    imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI.

    HighCVSS 7.5No exploitEPSS 3%

    txjia · imcatDec 30, 2018

  • CVE-2020-23520
    29Monitor

    imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality.

    HighCVSS 7.2No exploitEPSS 2%

    txjia · imcatDec 9, 2020

  • CVE-2021-35369
    26Monitor

    Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filt

    MediumCVSS 6.5No exploitEPSS 1%

    txjia · imcatFeb 24, 2023

  • CVE-2018-20611
    24Monitor

    imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.

    MediumCVSS 6.1No exploitEPSS 1%

    txjia · imcatDec 30, 2018

  • CVE-2018-20609
    22Monitor

    imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI.

    MediumCVSS 5.3No exploitEPSS 3%

    txjia · imcatDec 30, 2018

  • CVE-2018-20607
    22Monitor

    imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI.

    MediumCVSS 5.3No exploitEPSS 3%

    txjia · imcatDec 30, 2018

  • CVE-2019-8436
    21Monitor

    imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.

    MediumCVSS 5.4No exploitEPSS 1%

    txjia · imcatFeb 17, 2019

  • CVE-2018-20610
    20Monitor

    imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter.

    MediumCVSS 4.9No exploitEPSS 2%

    txjia · imcatDec 30, 2018