PT-2006-5657 · Artmedic · Artmedic Links

Botan · Published 2006-09-21 · Updated 2018-10-17 · CVE-2006-4905

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Artmedic Links version 5.0

Description A remote file inclusion issue exists, allowing remote attackers to execute arbitrary PHP code via a URL in the id parameter, which is processed by the readfile function.

Recommendations For Artmedic Links version 5.0, consider disabling the readfile function or restricting access to the id parameter in the index.php file until a patch is available. Avoid using the id parameter in the affected API endpoint until the issue is resolved.

Fix

Related Identifiers

CVE-2006-4905

Affected Products

Artmedic Links

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-4905 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29013 · Note
• http://securitytracker.com/id?1016880 · Note
• http://securityfocus.com/archive/1/446329/100/0/threaded · Note
• http://securityreason.com/securityalert/1600 · Note
• http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-27-artmedic-links.html · Note