533 matches found
CVE-2021-3832 Integria IMS Remote Code Execution
Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload function in order to exploit the vulnerability...
CVE-2021-3832
CVE-2021-3832 affects Integria IMS 5.0.92 and exposes a Remote Code Execution vulnerability via the AsyncUpload() function, granting unauthenticated network-accessible attackers full code execution through file uploads. The issue is rooted in the upload handling, enabling an attacker to abuse the...
PT-2021-22059 · Unknown · Integria Ims
Name of the Vulnerable Software and Affected Versions: Integria IMS version 5.0.92 Description: The issue is related to incorrect filtering of certain fields in the login.php file, which could allow an attacker to perform a cross-site scripting attack XSS. Recommendations: For Integria IMS versio...
Artica Integria IMS 安全漏洞
Artica Integria IMS is a web-based help desk software from the Spanish company Artica. The software features SLA tracking, workflow management, personalized reporting and email management.A security vulnerability exists in the Artica Integria IMS login checks, which could be exploited by an...
PT-2021-22048 · Unknown · Integria Ims
Name of the Vulnerable Software and Affected Versions: Integria IMS affected versions not specified Description: The login check in Integria IMS uses a loose comparator to compare the MD5 hash of the user-provided password and the MD5 hash stored in the database. This allows an attacker with a...
Artica Integria IMS 代码问题漏洞
Artica Integria IMS is a suite of Web-based helpdesk software from Spain's Artica. The software features SLA tracking, workflow management, personalized reports, and email management. A security vulnerability exists in Integria IMS version 5.0.92, which can be exploited by unauthenticated attacke...
CVE-2021-3833
Integria IMS login check uses a loose comparator "==" to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords...
CVE-2021-3832
Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload function in order to exploit the vulnerability...
CVE-2017-16645
The imspcugetcdcuniondesc function in drivers/input/misc/ims-pcu.c in the Linux kernel, through 4.13.11, allows local users to cause a denial of service imspcuparsecdcdata out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...
CVE-2019-15091
filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload...
CVE-2019-15091
filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload...
Design/Logic Flaw
filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload...
CVE-2019-15091
The CVE CVE-2019-15091 affects Artica Integria IMS 5.0.86 via filemgr.php, where an arbitrary file upload is possible through index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload. The NVD entry documents a high-severity issue (CVSS v3 base score 9.8, CRITICAL) with a network attack vector an...
CVE-2019-15091
filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload...
Integria IMS 5.0.86 - Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: Integria IMS 5.0.86 - Arbitrary File Upload Exploit Author: Greg.Priest Vendor Homepage: https://integriaims.com/ Software Link: https://sourceforge.net/projects/integria/files/5.0.86/ Version: Integria IMS 5.0.86 Tested on:...
Integria IMS 5.0.86 - Arbitrary File Upload
Integria IMS 5.0.86 - Arbitrary File Upload Exploit Title: Integria IMS 5.0.86 - Arbitrary File Upload Date: 2019-08-16 Exploit Author: Greg.Priest Vendor Homepage: https://integriaims.com/ Software Link: https://sourceforge.net/projects/integria/files/5.0.86/ Version: Integria IMS 5.0.86 Tested...
Integria IMS 5.0.86 Arbitrary File Upload
Exploit Title: Integria IMS 5.0.86 - Arbitrary File Upload Date: 2019-08-16 Exploit Author: Greg.Priest Vendor Homepage: https://integriaims.com/ Software Link: https://sourceforge.net/projects/integria/files/5.0.86/ Version: Integria IMS 5.0.86 Tested on: Windows CVE : N/A...
Integria IMS 5.0.86 - Arbitrary File Upload
Exploit Title: Integria IMS 5.0.86 - Arbitrary File Upload Date: 2019-08-16 Exploit Author: Greg.Priest Vendor Homepage: https://integriaims.com/ Software Link: https://sourceforge.net/projects/integria/files/5.0.86/ Version: Integria IMS 5.0.86 Tested on: Windows CVE : N/A...
CVE-2018-1000812
The CVE-2018-1000812 entry concerns Artica Integria IMS (versions around 5.0 MR56 Package 58 and likely earlier) with a CWE-640 Weak Password Recovery Mechanism in the Password recovery process. The vulnerability in general/password_recovery.php (line 45) can allow takeover of IntegriaIMS web app...
CVE-2018-1000812
Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/passwordrecovery.php that can result in IntegriaIMS web app user accounts can be take...