medium6.5Public exploit code
CVE-2018-19829
Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID number is known.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Integria IMS 5.0.83 - Cross-Site Request Forgery2018-12-19 · webapps · php
Impact
Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID number is known.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artica | Integria Ims | Version 5.0.83 |