ArticaTech Artica Proxy is an open-source Artica proxy solution of French ArticaTech company. The ‘apikey’ parameter of the fw.login.php file in version 4.30.00000000 of Artica Web Proxy has a SQL injection vulnerability.
A remote attacker can use this vulnerability to bypass the privilege detection and gain the web back-end administrator privileges.
At present, the manufacturer has not released a repair measure to solve this security problem. It is recommended that users who use this software follow the manufacturer’s homepage or refer to the website for solutions: (http://www.articatech.com/index.php).