CVE-2007-5600 - CVE House
Back to Database
Status published Medium CVE-2007-5600

Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and...

Vulnerability Description

Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftps, (3) ssh2.sftp, or (4) ssh2.scp URL, in the page parameter, for which PHP remote file inclusion is blocked only for http, https, and ftp URLs.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-5600

Credits & Attribution

No credits recorded in the NVD database.

References

More from artmedic webdesign

View All →
CVE-2008-0798
Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when...
Medium 4.3
CVE-2008-0765
Multiple cross-site scripting (XSS) vulnerabilities in artmedic webdesign weblog allow...
Medium 4.3
CVE-2007-5489
Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and...
High 7.5
CVE-2006-4905
PHP remote file inclusion vulnerability in index.php in Artmedic Links...
High 7.5
CVE-2006-2609
artmedic newsletter 4.1.2 and possibly other versions, when register_globals is...
Medium 5.1

Affected Vendor

artmedic webdesign

View all reports →

Affected Software

artmedic cms
Vulnerable Versions:
0

Timeline

Official Publish: October 19th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.