PT-2007-6620 · Artmedic · Artmedic Cms

Ins · Publicado 2007-10-19 · Atualizado 2017-09-29 · CVE-2007-5600

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Artmedic CMS versions 3.4 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via specific pathways, including UNC share pathnames or certain URLs, by exploiting an incomplete blacklist in the page parameter of index.php. This is possible because PHP remote file inclusion is only blocked for http, https, and ftp URLs, leaving other types of URLs vulnerable.

Recommendations For Artmedic CMS versions 3.4 and earlier, consider restricting access to the index.php file until a patch is available, and avoid using the page parameter with UNC share pathnames or ftps, ssh2.sftp, and ssh2.scp URLs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-5600

Produtos afetados

Artmedic Cms

Referências · 2

• 🔥 https://exploit-db.com/exploits/4538 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5600 · Nota de Segurança