PT-2007-6620 · Artmedic · Artmedic Cms
Ins
·
Published
2007-10-19
·
Updated
2017-09-29
·
CVE-2007-5600
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Artmedic CMS versions 3.4 and earlier
Description
The issue allows remote attackers to execute arbitrary PHP code via specific pathways, including UNC share pathnames or certain URLs, by exploiting an incomplete blacklist in the
page parameter of index.php. This is possible because PHP remote file inclusion is only blocked for http, https, and ftp URLs, leaving other types of URLs vulnerable.Recommendations
For Artmedic CMS versions 3.4 and earlier, consider restricting access to the
index.php file until a patch is available, and avoid using the page parameter with UNC share pathnames or ftps, ssh2.sftp, and ssh2.scp URLs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Artmedic Cms