[Snort-sigs] WEB-MISC cross site scripting attempt - false positive addition
greg.panula at ...2688...
Wed Aug 4 13:36:10 EDT 2004
# This is a template for submitting snort signature descriptions to
# the snort.org website
# Ensure that your descriptions are your own
# and not the work of others. References in the rules themselves
# should be used for linking to other's work.
# If you are unsure of some part of a rule, use that as a commentary
# and someone else perhaps will be able to fix it.
Summary: This event is generated when a cross-site scripting attack is
being attempted, or a potential attacker is testing your site to determine
if it is vulnerable.
False Positives: The default 404 error page given out by IIS 5.0 triggers
More information about the Snort-sigs