haungtongfu

CSRF vulnerability in imcat v5.4

7

### 1. Overview Official website: http://txjia.com/imcat/ Version: imcat-5.4 Vulnerability type: CSRF post Source code: https://github.com/peacexie/imcat/releases/tag/v5.4 Harm: Super administrator account can be added ### 2. Analysis 2.1 logic analysis In the...

Code Execution Vulnerability in the background of imcat5.4

3

### 1. Overview Official website: http://txjia.com/imcat/ Version: imcat-5.4 Vulnerability type: Code Execution Source code: https://github.com/peacexie/imcat/releases/tag/v5.4 PS: it is recommended to use php7.0.12 environment. Other environments will have different problems when...