Simple.Machines.Forum.PHP.Code.Execution

description-logoDescription

This indicates an attempt to exploit one of the PHP code-execution vulnerabilities in Simple Machines Forum.
The vulnerabilities are caused by an error that occurs when the vulnerable software handles a malicious HTTP request. They allow remote attackers to execute arbitrary PHP code by sending a crafted request.

affected-products-logoAffected Products

Simple Machines Forum 1.1.6

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Refer to the vendor's web site for the suggested workaround:
http://www.simplemachines.org/

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)