Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Ártica Component: Integria Ims Clear all filters
TI-2021-02765 CVE-2021-3834 · GHSA-9cwq-jp7m-xprp

Integria IMS vulnerable to Cross Site Scripting (XSS)

Priority LOW 28

Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00586 Published 2021-10-07 No fix listed CWE-79
TI-2021-02764 CVE-2021-3833 · GHSA-5pf8-m5c6-qc44

Integria IMS incorrect authorization

Priority MEDIUM 44

Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01119 Published 2021-10-07 No fix listed CWE-697
TI-2021-02763 CVE-2021-3832 · GHSA-39p6-6vvx-xcqg

Integria IMS Remote Code Execution

Priority MEDIUM 46

Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02254 Published 2021-10-07 No fix listed CWE-434
TI-2019-11269 CVE-2019-15091 · GHSA-gppq-frh8-8jm4

filemgr.php in Artica Integria IMS 5.0.86 allows…

Priority MEDIUM 45

filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01554 Published 2019-08-16 No fix listed CWE-434
TI-2018-16036 CVE-2018-1000812 · GHSA-p55v-v4xm-jx95

Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a…

Priority LOW 39

Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/password…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01985 Published 2018-12-20 No fix listed CWE-640