What’s Vulnerable › Vulnerabilities
CVE-2007-5600
- Severity: medium (CVSS 6.8 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2007-10-19 · updated 2026-06-16
- Weakness: CWE-94
Description
Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftps, (3) ssh2.sftp, or (4) ssh2.scp URL, in the page parameter, for which PHP remote file inclusion is blocked only for http, https, and ftp URLs.
Affected products
- Artmedic Webdesign Artmedic Cms: through 3.4
References
Get alerted when CVE-2007-5600 or the next vulnerability affects your stack