vendor:
artmedic CMS
by:
iNs
5.5
CVSS
MEDIUM
LFI
22
CWE
Product Name: artmedic CMS
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2007
artmedic CMS Local File Inclusion
The artmedic CMS is vulnerable to local file inclusion (LFI) attacks. An attacker can exploit this vulnerability by manipulating the 'page' parameter in the 'index.php' file. By including local files, the attacker can view sensitive information, execute arbitrary code, or perform other malicious actions.
Mitigation:
To mitigate this vulnerability, it is recommended to update to the latest version of artmedic CMS or apply the patch provided by the vendor. Additionally, input validation and filtering should be implemented to prevent malicious file inclusion.
