imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.
No PoCs from references.
- https://github.com/SexyBeast233/SecBooks