Intrusion Prevention

Elefant.CMS.PHP.File.Upload.Code.Execution

Description

This indicates an attack attempt to exploit a Code Injection vulnerability in Elefant CMS.
The vulnerability is due to insufficient sanitizing of user uploaded PHP file. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application.

Affected Products

Elefant CMS 1.3.12

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrades or patches from the vendor.
https://github.com/jbroadway/elefant/releases/tag/elefant_1_3_13_rc