alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS Wordpress Google Doc Embedder plugin file parameter Local File Inclusion Attempt"; flow:established,to_server; content:"/wp-content/plugins/google-document-embedder/libs/pdf.php?"; nocase; http_uri; fast_pattern:20,20; content:"file="; nocase; http_uri; content:"|2e 2e 2f|"; depth:200; reference:url,secunia.com/advisories/50832; classtype:web-application-attack; sid:2016158; rev:1;)

Added 2013-01-04 18:08:21 UTC