[Snort-sigs] Simple CMS admin access rule

Ureleet Ureleet ureleet at ...2420...
Wed Aug 2 19:22:58 EDT 2006


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"COMMUNITY
Web-php Simple CMS Admin access"; flow:to_server,established;
uricontent:"admin/config_pages.php?loggedin=1";
ref:url,www.securityfocus.com/archive/82/442015/30/0/threaded; rev:1;)

fun w/ CMS




More information about the Snort-sigs mailing list