CVE-2006-2683

Name of the Vulnerable Software and Affected Versions open-medium.CMS version 0.25

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the REDSYS[MYPATH][TEMPLATES] parameter in the 404.php file.

Recommendations For open-medium.CMS version 0.25, consider restricting access to the 404.php file or the REDSYS[MYPATH][TEMPLATES] parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.