EUVD-2018-11504

Malware in sbrugna...

EUVD-2018-11503

Malware in sbrugna...

EUVD-2019-6169

Malware in sbrugna...

CVE-2019-15091

filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2;=operation/wiki/wiki=upload arbitrary file upload...

Artica Integria IMS has an unspecified vulnerability

Artica Integria IMS is a web-based help desk software from the Spanish company Artica. The software features SLA tracking, workflow management, personalized reporting and email management.A security vulnerability exists in the Artica Integria IMS login checks, which could be exploited by an...

Artica Integria IMS 跨站脚本漏洞

Artica Integria IMS is a suite of Web-based helpdesk software from Spain's Artica. The software features SLA tracking, workflow management, personalized reporting and email management. A cross-site scripting vulnerability exists in Artica Integria IMS version 5.0.92, which does not properly filte...

Artica Integria IMS 代码问题漏洞

Artica Integria IMS is a suite of Web-based helpdesk software from Spain's Artica. The software features SLA tracking, workflow management, personalized reports, and email management. A security vulnerability exists in Integria IMS version 5.0.92, which can be exploited by unauthenticated attacke...

Artica Integria IMS 安全漏洞

Artica Integria IMS is a web-based help desk software from the Spanish company Artica. The software features SLA tracking, workflow management, personalized reporting and email management.A security vulnerability exists in the Artica Integria IMS login checks, which could be exploited by an...

CVE-2019-15091

filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload...

CVE-2019-15091

filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload...

Design/Logic Flaw

filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload...

CVE-2019-15091

filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload...

CVE-2019-15091

The CVE CVE-2019-15091 affects Artica Integria IMS 5.0.86 via filemgr.php, where an arbitrary file upload is possible through index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload. The NVD entry documents a high-severity issue (CVSS v3 base score 9.8, CRITICAL) with a network attack vector an...

CVE-2018-1000812

Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/passwordrecovery.php that can result in IntegriaIMS web app user accounts can be take...

CVE-2018-1000812

The CVE-2018-1000812 entry concerns Artica Integria IMS (versions around 5.0 MR56 Package 58 and likely earlier) with a CWE-640 Weak Password Recovery Mechanism in the Password recovery process. The vulnerability in general/password_recovery.php (line 45) can allow takeover of IntegriaIMS web app...

CVE-2018-19829

Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/listausuarios, resulting in the ability to delete an arbitrary user when the ID number is known...

CVE-2018-19829

Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/listausuarios, resulting in the ability to delete an arbitrary user when the ID number is known...

Cross site request forgery (csrf)

Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/listausuarios, resulting in the ability to delete an arbitrary user when the ID number is known...

CVE-2018-19829

Integria IMS 5.0.83 is affected by a Cross-Site Request Forgery in the endpoint godmode/usuarios/lista_usuarios, enabling deletion of an arbitrary user when the user ID is known. PoCs/Exploits describe GET/POST-based deletion. A patched version, 5.0.84, is indicated in connected references; updat...

CVE-2018-19829

Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/listausuarios, resulting in the ability to delete an arbitrary user when the ID number is known...