CVE-2018-20606

Name of the Vulnerable Software and Affected Versions imcat version 4.4

Description The issue allows for full path disclosure through a specific URI. The affected endpoint is "dev.php?tools-ipaddr&api=Pcoln&uip=" and it is related to the uip variable.

Recommendations For imcat version 4.4, consider restricting access to the "dev.php" endpoint until a fix is available, or avoid using the uip variable in the affected API endpoint to minimize the risk of exploitation.