Integria Ims@* Security Vulnerabilities and Issues — Integria Ims@* CVE List

Lucene search

ArticaIntegria Ims*

4 matches found

CVE•added 2021/10/07 4:15 p.m.•36 views

CVE-2021-3833

Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords.

9.8CVSS9.5AI score0.00607EPSS

CVE•added 2018/12/20 3:29 p.m.•34 views

CVE-2018-1000812

Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/password_recovery.php that can result in IntegriaIMS web app user accounts can be taken...

8.1CVSS8AI score0.00594EPSS

CVE•added 2021/10/07 2:15 p.m.•34 views

CVE-2021-3832

Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload() function in order to exploit the vulnerability.

9.8CVSS9.8AI score0.01593EPSS

CVE•added 2021/10/07 4:15 p.m.•28 views

CVE-2021-3834

Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack (XSS).

6.1CVSS5.6AI score0.00251EPSS