Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:PHP:CMD-INJ-UA |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
PHP Command Injection User Agent |
Release Date |
2010/03/22 |
Update Number |
1636 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: PHP Command Injection User Agent
This signature detects Web requests containing a potentially dangerous PHP script. A malicious site can exploit a known vulnerability in multiple PHP applications and execute arbitrary PHP commands on the victim's server.
Extended Description
phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."
Affected Products
- Tincan phplist 1.0
- Tincan phplist 1.0.1
- Tincan phplist 1.1.2b
- Tincan phplist 1.1.3b
- Tincan phplist 1.1.4b
- Tincan phplist 1.1.5
- Tincan phplist 1.1.5b
- Tincan phplist 1.1.6
- Tincan phplist 1.1.7
- Tincan phplist 1.3.5
- Tincan phplist 1.3.7
- Tincan phplist 1.4.1
- Tincan phplist 1.5.0
- Tincan phplist 1.5.1
- Tincan phplist 1.6.0
- Tincan phplist 1.6.1
- Tincan phplist 1.6.3
- Tincan phplist 1.6.4
- Tincan phplist 1.7.0
- Tincan phplist 1.7.1
- Tincan phplist 1.8.0
- Tincan phplist 1.9.0
- Tincan phplist 1.9.1
- Tincan phplist 1.9.2
- Tincan phplist 1.9.3
- Tincan phplist 2.1.0
- Tincan phplist 2.10.1
- Tincan phplist 2.10.2
- Tincan phplist 2.10.3
- Tincan phplist 2.10.4
- Tincan phplist 2.10.5
- Tincan phplist 2.10.6
- Tincan phplist 2.10.7
- Tincan phplist 2.1.1
- Tincan phplist 2.1.3
- Tincan phplist 2.1.4
- Tincan phplist 2.2.0
- Tincan phplist 2.2.1
- Tincan phplist 2.3.0
- Tincan phplist 2.3.1
- Tincan phplist 2.3.2
- Tincan phplist 2.3.3
- Tincan phplist 2.3.4
- Tincan phplist 2.4.0
- Tincan phplist 2.4.7
- Tincan phplist 2.5.0
- Tincan phplist 2.5.1
- Tincan phplist 2.5.2
- Tincan phplist 2.5.3
- Tincan phplist 2.5.4
- Tincan phplist 2.5.5
- Tincan phplist 2.5.6
- Tincan phplist 2.5.7
- Tincan phplist 2.5.8
- Tincan phplist 2.6
- Tincan phplist 2.6.0
- Tincan phplist 2.6.1
- Tincan phplist 2.6.2
- Tincan phplist 2.6.3
- Tincan phplist 2.6.4
- Tincan phplist 2.6.5
- Tincan phplist 2.7.1
- Tincan phplist 2.7.2
- Tincan phplist 2.8.12
- Tincan phplist 2.8.2
- Tincan phplist 2.8.7
- Tincan phplist 2.9.3
- Tincan phplist 2.9.4
- Tincan phplist 2.9.5
References
- BugTraq: 32841
- CVE: CVE-2008-5887