Artica Integria IMS 5.0.92
Approved changes feed: RSS · Atom
cpe:2.3:a:artica:integria_ims:5.0.92:*:*:*:*:*:*:*
part: a version: 5.0.92 update: *
| Vendor | Artica (0f19f399-0cbf-52c8-988a-49f1b199888b) |
|---|---|
| Product | Integria Ims (0d5980ee-bfb9-5c42-a630-e408fbfd0da3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-3834 |
vulnerable | 2026-06-08 05:33:54.398842 |
Integria IMS vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.4)
Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack (XSS).
Published: 2021-10-07T15:14:35.381Z
Updated: 2024-09-16T17:37:38.171Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3833 |
vulnerable | 2026-06-08 05:33:54.398460 |
Integria IMS incorrect authorization
CRITICAL (9.8)
Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords.
Published: 2021-10-07T15:10:07.808Z
Updated: 2024-09-16T23:46:25.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3832 |
vulnerable | 2026-06-08 05:33:54.397977 |
Integria IMS Remote Code Execution
CRITICAL (9.8)
Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload() function in order to exploit the vulnerability.
Published: 2021-10-07T13:33:19.417Z
Updated: 2024-09-17T02:36:13.483Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.