ET WEB_SPECIFIC_APPS MXBB Remote Inclusion Attempt -- faq.php module_root_path
Sourceet/open
Fileemerging-web_specific_apps.rules
CreatedJuly 30, 2010
UpdatedMarch 19, 2024
Classificationweb-application-attack
alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS MXBB Remote Inclusion Attempt -- faq.php module_root_path"; flow:established,to_server ; http.uri; content:"/faq.php?"; fast_pattern; nocase; content:"module_root_path="; nocase; content:"cmd="; nocase; pcre:"/=\s*(https?|ftps?|php)\:\//i" ; reference:cve,CVE-2007-2493 ; reference:url,www.milw0rm.com/exploits/3833 ; classtype:web-application-attack; sid:2003684; rev:8; metadata:created_at 2010_07_30, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_19;)
References
Metadata
created at2010_07_30
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_19
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!