69 matches found
PT-2018-15118
Name of the Vulnerable Software and Affected Versions Artica Integria IMS version 5.0.83 Description The issue allows for CSRF in the "godmode/usuarios/lista usuarios" API endpoint, resulting in the ability to delete an arbitrary user when the user id is known. Recommendations For Artica Integria...
CVE-2018-19829: Cross-Site Request Forgery (CSRF)
Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/listausuarios, resulting in the ability to delete an arbitrary user when the ID number is known...
CVE-2018-19828
Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...
Code injection
Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...
CVE-2018-19828
Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...
CVE-2018-19828
The CVE-2018-19828 entry affects Integria IMS 5.0.83, where the search_string parameter in index.php is exploitable for Reflected Cross-Site Scripting. The vulnerability is triggered via a GET request and has PoC payloads publicly demonstrated (e.g., payloads like ‘?>[removed]alert(...)’). Pat...
CVE-2018-19828
Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...
PT-2018-15117
Name of the Vulnerable Software and Affected Versions Artica Integria IMS version 5.0.83 Description The issue allows for XSS via the search string parameter. Recommendations For Artica Integria IMS version 5.0.83, avoid using the search string parameter until the issue is resolved...