Vulnerabilities (CVE)

Filtered by vendor Artica Subscribe
Filtered by product Integria Ims
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-3834 1 Artica 1 Integria Ims 2023-11-20 4.3 MEDIUM 6.1 MEDIUM
Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack (XSS).
CVE-2018-19829 1 Artica 1 Integria Ims 2019-01-30 5.8 MEDIUM 6.5 MEDIUM
Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID number is known.
CVE-2018-19828 1 Artica 1 Integria Ims 2019-01-04 4.3 MEDIUM 6.1 MEDIUM
Artica Integria IMS 5.0.83 has XSS via the search_string parameter.