Vulnerability
ArticaTech Artica Proxy is an open-source Artica proxy solution of French ArticaTech company. The ‘apikey’ parameter of the fw.login.php file in version 4.30.00000000 of Artica Web Proxy has a SQL injection vulnerability.
Impact
A remote attacker can use this vulnerability to bypass the privilege detection and gain the web back-end administrator privileges.
Mitigation / Precaution
At present, the manufacturer has not released a repair measure to solve this security problem. It is recommended that users who use this software follow the manufacturer’s homepage or refer to the website for solutions: (http://www.articatech.com/index.php).
Written by
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 10 days
