alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; content:"/gallery.php?"; http_uri; nocase; content:"picID="; http_uri; nocase; content:"DELETE"; http_uri; nocase; pcre:"/DELETE.+FROM/Ui"; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; classtype:web-application-attack; sid:2005242; rev:7; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, signature_severity Major, tag SQL_Injection, updated_at 2020_09_10;)

Added 2020-09-10 18:36:44 UTC

Please enter documentation, comments, false positives, or concerns with this signature. Press the Attach button below to add samples or Pcaps.

---

alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; content:"/gallery.php?"; http_uri; nocase; content:"picID="; http_uri; nocase; content:"DELETE"; http_uri; nocase; pcre:"/DELETE.+FROM/Ui"; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; classtype:web-application-attack; sid:2005242; rev:7; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, signature_severity Major, tag SQL_Injection, updated_at 2019_09_26;)

Added 2020-08-05 19:03:04 UTC

---

alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; content:"/gallery.php?"; http_uri; nocase; content:"picID="; http_uri; nocase; content:"DELETE"; http_uri; nocase; pcre:"/DELETE.+FROM/Ui"; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; classtype:web-application-attack; sid:2005242; rev:7; metadata:affected_product Web_Server_Applications, attack_target Web_Server, deployment Datacenter, tag SQL_Injection, signature_severity Major, created_at 2010_07_30, updated_at 2019_09_26;)

Added 2019-09-26 19:55:20 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; content:"/gallery.php?"; http_uri; nocase; content:"picID="; http_uri; nocase; content:"DELETE"; http_uri; nocase; pcre:"/DELETE.+FROM/Ui"; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; classtype:web-application-attack; sid:2005242; rev:6; metadata:affected_product Web_Server_Applications, attack_target Web_Server, deployment Datacenter, tag SQL_Injection, signature_severity Major, created_at 2010_07_30, updated_at 2019_08_22;)

Added 2019-08-22 20:11:47 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; classtype:web-application-attack; sid:2005242; rev:5; metadata:affected_product Web_Server_Applications, attack_target Web_Server, deployment Datacenter, tag SQL_Injection, signature_severity Major, created_at 2010_07_30, updated_at 2016_07_01;)

Added 2017-08-07 20:58:25 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; classtype:web-application-attack; sid:2005242; rev:5;)

Added 2011-10-12 19:17:44 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; sid:2005242; rev:5;)

Added 2011-09-14 22:30:56 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SPECIFIC_APPS/WEB_webSPELL; sid:2005242; rev:5;)

Added 2011-02-04 17:24:06 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SPECIFIC_APPS/WEB_webSPELL; sid:2005242; rev:5;)

Added 2009-10-06 14:40:06 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC_APPS webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SPECIFIC_APPS/WEB_webSPELL; sid:2005242; rev:5;)

Added 2009-10-06 14:40:06 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SPECIFIC_APPS/WEB_webSPELL; sid:2005242; rev:5;)

Added 2009-10-06 14:20:39 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SPECIFIC_APPS/WEB_webSPELL; sid:2005242; rev:5;)

Added 2009-10-06 14:20:39 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SPECIFIC_APPS/WEB_webSPELL; sid:2005242; rev:5;)

Added 2009-10-06 14:17:15 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SPECIFIC_APPS/WEB_webSPELL; sid:2005242; rev:5;)

Added 2009-10-06 14:17:15 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_webSPELL; sid:2005242; rev:4;)

Added 2009-03-01 16:18:52 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; reference:url,doc.emergingthreats.net/2005242; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_webSPELL; sid:2005242; rev:4;)

Added 2009-03-01 16:18:51 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:3;)

Added 2008-02-01 10:47:15 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SPECIFIC webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:3;)

Added 2008-02-01 10:47:15 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-29 09:47:50 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-29 05:17:10 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-29 04:04:45 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-29 03:49:22 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-27 12:56:27 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-27 10:32:57 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-27 05:35:24 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-27 05:09:59 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-27 04:39:46 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-27 03:49:17 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-27 02:40:49 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-26 23:06:00 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-25 14:28:09 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-25 01:35:31 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-25 00:52:31 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-24 23:48:42 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-24 16:04:37 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-24 14:40:11 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-24 03:17:20 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-24 02:57:51 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-23 08:46:37 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-22 23:04:58 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-22 22:47:32 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-22 12:04:46 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-21 22:06:21 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-21 00:31:22 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-20 10:04:43 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-20 04:17:24 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-19 22:43:38 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-19 20:53:50 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-19 01:37:27 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-19 01:23:36 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-18 11:47:34 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-18 11:40:34 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; uricontent:"DELETE"; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:2;)

Added 2007-08-13 04:14:02 UTC

---

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"BLEEDING-EDGE WEB webSPELL SQL Injection Attempt -- gallery.php picID DELETE"; flow:established,to_server; uricontent:"/gallery.php?"; nocase; uricontent:"picID="; nocase; pcre:"/DELETE.+FROM/Ui"; classtype:web-application-attack; reference:cve,CVE-2007-0520; reference:url,www.milw0rm.com/exploits/3172; sid:2005242; rev:1;)

Added 2007-06-13 01:20:16 UTC

---