Txjia 16 CVEs across 1 Txjia products. Browse Txjia vulnerabilities, severities, and proof-of-concept exploits.
Txjia products with known CVEs Txjia CVEs — newest first CVE Severity Score Published Summary CVE-2021-35370Critical 9.82023-02-24 An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function. CVE-2021-35369Medium 6.52023-02-24 Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get_contents… CVE-2021-36444High 8.82023-02-03 Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the ad… CVE-2021-36443High 8.82023-02-03 Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification. CVE-2020-22120High 8.82021-08-18 A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code. CVE-2020-20392Critical 9.82021-06-23 SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php. CVE-2020-23520High 7.22020-12-09 imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality. CVE-2019-14968Critical 9.82019-08-12 An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action. CVE-2019-8436Medium 5.42019-02-18 imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter. CVE-2018-20611Medium 6.12018-12-30 imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI. CVE-2018-20610Medium 4.92018-12-30 imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter. CVE-2018-20609Medium 5.32018-12-30 imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI. CVE-2018-20608High 7.52018-12-30 imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI. CVE-2018-20607Medium 5.32018-12-30 imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI. CVE-2018-20606High 7.52018-12-30 imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI. CVE-2018-20605Critical 9.82018-12-30 imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file.