PT-2006-5657 · Artmedic · Artmedic Links

Botan · Publicado 2006-09-21 · Atualizado 2018-10-17 · CVE-2006-4905

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Artmedic Links version 5.0

Description A remote file inclusion issue exists, allowing remote attackers to execute arbitrary PHP code via a URL in the id parameter, which is processed by the readfile function.

Recommendations For Artmedic Links version 5.0, consider disabling the readfile function or restricting access to the id parameter in the index.php file until a patch is available. Avoid using the id parameter in the affected API endpoint until the issue is resolved.

Correção

Identificadores relacionados

CVE-2006-4905

Produtos afetados

Artmedic Links

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-4905 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29013 · Nota
• http://securitytracker.com/id?1016880 · Nota
• http://securityfocus.com/archive/1/446329/100/0/threaded · Nota
• http://securityreason.com/securityalert/1600 · Nota
• http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-27-artmedic-links.html · Nota