Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:PHP:CVE-2015-2208-RCE

Severity

Minor

Recommended

Yes

Recommended Action

Drop

Category

HTTP

Keywords

PHPMoAdmin Unauthorized Remote Code Execution

Release Date

2017/03/29

Update Number

2846

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: PHPMoAdmin Unauthorized Remote Code Execution


This signature detects attempts to exploit a known vulnerability against PHPMoAdmin. A successful attack can lead to arbitrary code execution.

Extended Description

The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter.

Affected Products

  • Avinu phpmoadmin 1.1.2

References

  • CVE: CVE-2015-2208
  • URL: http://seclists.org/fulldisclosure/2015/Mar/19
  • URL: http://seclists.org/oss-sec/2015/q1/743

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out