CVE-2019-14968: Txjia Imcat

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action.

Affected products

• Txjia Imcat: version 4.9 only

Published 2019-08-12. Last modified 2026-06-17.