Unrated
imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI.
CVE-2018-20606
First seen on SecPulse
References
- report github.com