alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS Horde XSS attempt passwd/main.php"; flow:to_server,established; content:"/horde/passwd/main.php?"; nocase; http_uri; pcre:"/passwd/main\x2Ephp\x3F[^\x0A\x0D]*backend\x3D[^\x0A\x0D\x26]*\x22/iU"; reference:url,bugs.horde.org/ticket/8398; reference:url,doc.emergingthreats.net/2009496; classtype:web-application-attack; sid:2009496; rev:6;)

Added 2011-10-12 19:27:30 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS Horde XSS attempt passwd/main.php"; flow:to_server,established; content:"/horde/passwd/main.php?"; nocase; http_uri; pcre:"/passwd/main\x2Ephp\x3F[^\x0A\x0D]*backend\x3D[^\x0A\x0D\x26]*\x22/iU"; classtype:web-application-attack; reference:url,bugs.horde.org/ticket/8398; reference:url,doc.emergingthreats.net/2009496; sid:2009496; rev:6;)

Added 2011-09-14 22:40:51 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS Horde XSS attempt passwd/main.php"; flow:to_server,established; content:"/horde/passwd/main.php?"; nocase; http_uri; pcre:"/passwd/main\x2Ephp\x3F[^\x0A\x0D]*backend\x3D[^\x0A\x0D\x26]*\x22/iU"; classtype:web-application-attack; reference:url,bugs.horde.org/ticket/8398; reference:url,doc.emergingthreats.net/2009496; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SPECIFIC_APPS/WEB_Horde; sid:2009496; rev:6;)

Added 2011-02-04 17:28:50 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS Horde XSS attempt passwd/main.php"; flow:to_server,established; uricontent:"/horde/passwd/main.php?"; nocase; pcre:"/passwd/main\x2Ephp\x3F[^\x0A\x0D]*backend\x3D[^\x0A\x0D\x26]*\x22/iU"; classtype:web-application-attack; reference:url,bugs.horde.org/ticket/8398; reference:url,doc.emergingthreats.net/2009496; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SPECIFIC_APPS/WEB_Horde; sid:2009496; rev:5;)

Added 2010-04-03 09:21:15 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS Horde XSS attempt passwd/main.php"; flow:to_server,established; uricontent:"/horde/passwd/main.php?"; nocase; pcre:"/passwd/main\x2Ephp\x3F[^\x0A\x0D]*backend\x3D[^\x0A\x0D\x26]*\x22/iU"; classtype:web-application-attack; reference:url,bugs.horde.org/ticket/8398; reference:url,doc.emergingthreats.net/2009496; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SPECIFIC_APPS/WEB_Horde; sid:2009496; rev:5;)

Added 2010-04-03 09:21:15 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SERVER Horde XSS attempt passwd/main.php"; flow:to_server,established; uricontent:"/horde/passwd/main.php?"; nocase; pcre:"/passwd/main\x2Ephp\x3F[^\x0A\x0D]*backend\x3D[^\x0A\x0D\x26]*\x22/iU"; classtype:web-application-attack; reference:url,bugs.horde.org/ticket/8398; reference:url,doc.emergingthreats.net/2009496; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SERVER/WEB_Horde; sid:2009496; rev:4;)

Added 2009-10-06 14:19:03 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SERVER Horde XSS attempt passwd/main.php"; flow:to_server,established; uricontent:"/horde/passwd/main.php?"; nocase; pcre:"/passwd/main\x2Ephp\x3F[^\x0A\x0D]*backend\x3D[^\x0A\x0D\x26]*\x22/iU"; classtype:web-application-attack; reference:url,bugs.horde.org/ticket/8398; reference:url,doc.emergingthreats.net/2009496; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SERVER/WEB_Horde; sid:2009496; rev:4;)

Added 2009-10-06 14:19:03 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB Horde XSS attempt passwd/main.php"; flow:to_server,established; uricontent:"/horde/passwd/main.php?"; nocase; pcre:"/passwd/main\x2Ephp\x3F[^\x0A\x0D]*backend\x3D[^\x0A\x0D\x26]*\x22/iU"; classtype:web-application-attack; reference:url,bugs.horde.org/ticket/8398; reference:url,doc.emergingthreats.net/2009496; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_Horde; sid:2009496; rev:2;)

Added 2009-07-08 19:53:31 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB Horde XSS attempt passwd/main.php"; flow:to_server,established; uricontent:"/horde/passwd/main.php?"; nocase; pcre:"/passwd/main\x2Ephp\x3F[^\x0A\x0D]*backend\x3D[^\x0A\x0D\x26]*\x22/iU"; classtype:web-application-attack; reference:url,bugs.horde.org/ticket/8398; reference:url,doc.emergingthreats.net/2009496; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_Horde; sid:2009496; rev:2;)

Added 2009-07-08 19:53:31 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB Horde XSS attempt passwd/main.php"; flow:to_server,established; uricontent:"/horde/passwd/main.php?"; nocase; pcre:"/passwd/main\x2Ephp\x3F[^\x0A\x0D]*backend\x3D[^\x0A\x0D\x26]*\x22/iU"; classtype:web-application-attack; reference:url,bugs.horde.org/ticket/8398; sid:2009496; rev:1;)

Added 2009-07-06 15:45:35 UTC


Topic revision: r1 - 2011-10-12 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats