ET ATTACK_RESPONSE PHP script in OptimizePress Upload Directory Possible WebShell Access

7.0.35.0SID: 2017854Rev: 5Enabled0 views
Sourceet/open
Fileemerging-attack_response.rules
CreatedDecember 13, 2013
UpdatedMarch 6, 2024
Classificationattempted-admin
alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET ATTACK_RESPONSE PHP script in OptimizePress Upload Directory Possible WebShell Access"; flow:established,to_server; http.uri; content:"/wp-content/uploads/optpress/images_"; fast_pattern; content:".php"; pcre:"/\/wp-content\/uploads\/optpress\/images\_(?:comingsoon|lncthumbs|optbuttons)\/.*?\.php/i"; reference:url,blog.sucuri.net/2013/12/wordpress-optimizepress-theme-file-upload-vulnerability.html; classtype:attempted-admin; sid:2017854; rev:5; metadata:created_at 2013_12_13, confidence Medium, signature_severity Minor, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_06;)

References

urlblog.sucuri.net/2013/12/wordpress-optimizepress-theme-file-upload-vulnerability.html

Metadata

created at2013_12_13
confidenceMedium
signature severityMinor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_06

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!