virus logo Intrusion Prevention

Elefant.CMS.PHP.File.Upload.Code.Execution

description-logoDescription

This indicates an attack attempt to exploit a Code Injection vulnerability in Elefant CMS.
The vulnerability is due to insufficient sanitizing of user uploaded PHP file. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application.

affected-products-logoAffected Products

Elefant CMS 1.3.12

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrades or patches from the vendor.
https://github.com/jbroadway/elefant/releases/tag/elefant_1_3_13_rc

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 43812
Created Mar 21, 2017
Updated May 02, 2022
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Default Action drop
Active
Affected OS Windows, Linux
Affected App PHP_app