alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET EXPLOIT phpLDAPadmin LDAP Injection"; flow:established,to_server; http.uri; content:"!(()&&!|7c|*|7c|*|7c|"; nocase; classtype:web-application-attack; sid:2025733; rev:4; metadata:affected_product PHP, attack_target Web_Server, created_at 2018_06_22, deployment Datacenter, performance_impact Low, signature_severity Major, updated_at 2024_03_07;)