İçeriğe atla
Noroxi

txjia kayıtları

txjia üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

16 kayıt
  • CVE-2018-20605
    40Planlayın

    imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file.

    KritikCVSS 9,8İstismar yokEPSS %2

    txjia · imcat30 Ara 2018

  • CVE-2019-14968
    39İzleyin

    An issue was discovered in imcat 4.9.

    KritikCVSS 9,8İstismar yokEPSS %2

    txjia · imcat12 Ağu 2019

  • CVE-2020-20392
    39İzleyin

    SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    txjia · imcat23 Haz 2021

  • CVE-2021-35370
    39İzleyin

    An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.

    KritikCVSS 9,8İstismar yokEPSS %1

    txjia · imcat24 Şub 2023

  • CVE-2020-22120
    36İzleyin

    A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execu

    YüksekCVSS 8,8İstismar yokEPSS %2

    txjia · imcat18 Ağu 2021

  • CVE-2021-36444
    35İzleyin

    Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token g

    YüksekCVSS 8,8İstismar yokEPSS %1

    txjia · imcat3 Şub 2023

  • CVE-2021-36443
    35İzleyin

    Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification.

    YüksekCVSS 8,8İstismar yokEPSS %1

    txjia · imcat3 Şub 2023

  • CVE-2018-20608
    34İzleyin

    imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    txjia · imcat30 Ara 2018

  • CVE-2018-20606
    31İzleyin

    imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI.

    YüksekCVSS 7,5İstismar yokEPSS %3

    txjia · imcat30 Ara 2018

  • CVE-2020-23520
    29İzleyin

    imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality.

    YüksekCVSS 7,2İstismar yokEPSS %2

    txjia · imcat9 Ara 2020

  • CVE-2021-35369
    26İzleyin

    Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filt

    OrtaCVSS 6,5İstismar yokEPSS %1

    txjia · imcat24 Şub 2023

  • CVE-2018-20611
    24İzleyin

    imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.

    OrtaCVSS 6,1İstismar yokEPSS %1

    txjia · imcat30 Ara 2018

  • CVE-2018-20609
    22İzleyin

    imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI.

    OrtaCVSS 5,3İstismar yokEPSS %3

    txjia · imcat30 Ara 2018

  • CVE-2018-20607
    22İzleyin

    imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI.

    OrtaCVSS 5,3İstismar yokEPSS %3

    txjia · imcat30 Ara 2018

  • CVE-2019-8436
    21İzleyin

    imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.

    OrtaCVSS 5,4İstismar yokEPSS %1

    txjia · imcat17 Şub 2019

  • CVE-2018-20610
    20İzleyin

    imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter.

    OrtaCVSS 4,9İstismar yokEPSS %2

    txjia · imcat30 Ara 2018