--- layout: post status: publish published: true title: heise Security reports backdoor in Artmedic CMS wordpress_id: 284 wordpress_url: http://pro.grammatic.org/post-heise-security-reports-backdoor-in-artmedic-cms-15.aspx date: !binary |- MjAwNy0wNS0xNiAxNToxODo1MiArMDIwMA== date_gmt: !binary |- MjAwNy0wNS0xNiAxNToxODo1MiArMDIwMA== categories: - Technology - InfoSec tags: - information security comments: [] ---

As the title says, heise Security have found a backdoor in the Artmedic CMS system. The interesting question is how this backdoor was implanted - giving the benefit of the doubt it's possible that the development server was compromised and the code injected (the changes date back to the 2nd of May), but on the other hand the developer's not to heise's emails could be indicative of something more sinister.