CVE-2019-15091

filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload

published August 16, 2019

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky file upload flaw lives in Artica Integria IMS 5.0.86, allowing users to trick the system into accepting any file! 🚨 Think of it like a restaurant kitchen that accepts any dish delivered—no checks on what’s being sent in. You never know when someone might slip in a recipe for disaster! This could enable an attacker to upload malicious files, potentially leading to unauthorized access, data breaches, or even a complete takeover of your system. It's like giving a stranger the keys to your restaurant and letting them cook whatever they want!

Put simply

Think of it like a restaurant kitchen that accepts any dish delivered—no checks on what’s being sent in. You never know when someone might slip in a recipe for disaster! The vulnerability lies in filemgr.php, where the application fails to validate file uploads, allowing users to upload any kind of file without restriction. This can be exploited to introduce harmful files to the server.

What to do

This could enable an attacker to upload malicious files, potentially leading to unauthorized access, data breaches, or even a complete takeover of your system. It's like giving a stranger the keys to your restaurant and letting them cook whatever they want! To protect against this issue, ensure you update to the latest version of Artica Integria IMS and implement strict file type validations. Consider restricting upload permissions to only trusted users as an extra precaution. You've got this! By taking these steps, you'll be well on your way to securing your system! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01554 · 74.9th percentile
Published
2019-08-16T12:10Z
EPSS history
Timeline
  • 16 AUG 12:10Z
    filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload
    cvelistv5