Unrated severityNVD Advisory· Published Oct 19, 2007· Updated Apr 23, 2026
CVE-2007-5600
CVE-2007-5600
Description
Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftps, (3) ssh2.sftp, or (4) ssh2.scp URL, in the page parameter, for which PHP remote file inclusion is blocked only for http, https, and ftp URLs.
Affected products
1- cpe:2.3:a:artmedic_webdesign:artmedic_cms:*:*:*:*:*:*:*:*Range: <=3.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.