On this page
Atomicorp WAF Rule 316812
Rule Summary
- Rule ID: 316812
- Status: Active
- Alert message: Atomicorp.com WAF Rules: Possible Attempt to Access unauthorized shell or exploit in upload directory
- Observed CWEs: CWE-434 (1)
- Revision: 2
- Rule severity: Critical (2)
- Request surfaces: Request filename
- Rule action: deny
- HTTP status: 404
- Logging: log, auditlog
Description
This rule detects behavior identified by its current alert as “Possible Attempt to Access unauthorized shell or exploit in upload directory” in the request filename. denies matching traffic with HTTP status 404.
Selected Related CVEs
This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.
| CVE | Vulnerability | Product | CVSS | Severity |
|---|---|---|---|---|
| CVE-2013-3591 | vTigerCRM v5.4.0/v5.3.0 Authenticated Remote Code Execution | vtiger crm | 8.8 (v3.1) | High |
Observed CWEs
These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.
| CWE | Related Published CVEs |
|---|---|
| CWE-434 | CVE-2013-3591 |