Intrusion PreventioneliteCMS.delete_image.php.Arbitrary.File.Delete
Description
This indicates an attack attempt to exploit an Access Control vulnerability in eliteCMS.
The vulnerability is due to an design error when the vulnerable software handles a HTTP request. Remote attackers may be able to exploit this to delete arbitrary file through the vulnerable system.
Affected Products
eliteCMS version 1.0
Impact
Privilege Escalation: Remote attacker could delete any arbitrary file on the remote system
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://elitecms.net/download.php
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2024-03-18 | 27.750 |
| ID | 54815 |
| Created | Mar 07, 2024 |
| Updated | Mar 18, 2024 |
| Risk |
|
| CVE ID | CVE-2022-24218 |
| Exploit Prediction Score | 0.09% |
| Default Action | pass |
| Active | |
| Affected OS | Other |
| Affected App | PHP_app |