SID 1:45984

Rule Category

SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.

Alert Message

SERVER-WEBAPP Joomla component Jimtawl 2.2.5 arbitrary PHP file upload attempt

Rule Explanation

This event is generated when an attempt to upload an arbitrary file into a Joomla! component is detected Impact: High Details: A vulnerability lying in the Joomla! component Jimtawl v2.2.5, allows an attacker use a vulnerable URI that takes the user into an upload form and allows to upload any kind of files, including suspicious PHP files that can cause an attacker to manage the server remotely Ease of Attack: Easy

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group