ET WEB_SPECIFIC_APPS Bugzilla token.cgi HPP e-mail validation bypass Attempt Client Body

7.0.35.0SID: 2019365Rev: 8Enabled1 views
Sourceet/open
Fileemerging-web_specific_apps.rules
CreatedOctober 8, 2014
UpdatedMarch 6, 2024
Classificationweb-application-attack
alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Bugzilla token.cgi HPP e-mail validation bypass Attempt Client Body"; flow:established,to_server; http.uri; content:"/token.cgi"; nocase; http.request_body; content:"&realname=login_name"; nocase; fast_pattern; reference:url,blog.gerv.net/2014/10/new-class-of-vulnerability-in-perl-web-applications/; classtype:web-application-attack; sid:2019365; rev:8; metadata:created_at 2014_10_08, signature_severity Major, updated_at 2024_03_06;)

References

urlblog.gerv.net/2014/10/new-class-of-vulnerability-in-perl-web-applications/

Metadata

created at2014_10_08
signature severityMajor
updated at2024_03_06

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!