CVSS: 6.7EPSS: 0%CPEs: 1EXPL: 1CVE-2021-36697
https://notcve.org/view.php?id=CVE-2021-36697
With an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the File Manager component. The new .htaccess file contains a Rewrite Rule with a type definition. A normal PHP file can be uploaded with this new "file type" and the code can be executed with an HTTP request. Con una cuenta de administrador, el fichero .htaccess en Artica Pandora FMS versiones anteriores a 755 incluyéndola, puede ser sobrescrito con el componente File Manager. El nuevo fichero .htaccess contiene una Regla de Reescritura con una definición de tipo. • http://artica.com http://pandora.com https://k4m1ll0.com/chained_exploit_htaccess.html • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2021-36698
https://notcve.org/view.php?id=CVE-2021-36698
Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name. Pandora FMS versiones hasta 755, permite un ataque de tipo XSS por medio de un nuevo Filtro de Eventos con un nombre diseñado • http://artica.com http://pandora.com https://k4m1ll0.com/chained_exploit_htaccess.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2021-3834 – Integria IMS vulnerable to Cross Site Scripting (XSS)
https://notcve.org/view.php?id=CVE-2021-3834
Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack (XSS). Integria IMS en su versión 5.0.92, no filtra correctamente algunos campos relacionados con el archivo login.php. Un atacante podría explotar esta vulnerabilidad para llevar a cabo un ataque de tipo cross-site scripting (XSS) • https://integriaims.com/en/services/updates https://www.incibe.es/en/incibe-cert/notices/aviso/integria-ims-vulnerable-cross-site-scripting-xss • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-3833 – Integria IMS incorrect authorization
https://notcve.org/view.php?id=CVE-2021-3833
Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords. Una comprobación de inicio de sesión de Integria IMS usa un comparador suelto ("==") para comparar el hash MD5 de la contraseña proporcionada por el usuario y el hash MD5 almacenado en la base de datos. Un atacante con una contraseña con un formato específico podría explotar esta vulnerabilidad para iniciar sesión en el sistema con diferentes contraseñas • https://integriaims.com/en/services/updates https://www.incibe.es/en/incibe-cert/notices/aviso/integria-ims-incorrect-authorization • CWE-697: Incorrect Comparison •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-3832 – Integria IMS Remote Code Execution
https://notcve.org/view.php?id=CVE-2021-3832
Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload() function in order to exploit the vulnerability. Integria IMS en su versión 5.0.92, es vulnerable a un ataque de Ejecución de Código Remota mediante una carga de archivos. Un atacante no autenticado podría abusar de la función AsyncUpload() para explotar la vulnerabilidad • https://integriaims.com/en/services/updates https://www.incibe-cert.es/en/early-warning/security-advisories/integria-ims-remote-code-execution • CWE-434: Unrestricted Upload of File with Dangerous Type •