Intrusion PreventionPAJAX.Arbitrary.PHP.Code.Execution
Description
This is an attack attempt against a vulnerability in PAJAX.
This issue is triggered when PHP code is included in the 'method' and 'args' variables, which may lead to a loss of integrity. An attacker may exploit this to gain access to unauthorized privileges.
Affected Products
PAJAX PAJAX 0.5.1
Impact
Attackers can execute arbitrary PHP code to gain unauthorized access.
Recommended Actions
Upgrade to version 0.5.2 or higher, as it has been reported to fix this vulnerability.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 11906 |
| Created | May 16, 2006 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2006-1551 |
| Exploit Prediction Score | 81.65% |
| Default Action | drop |
| Active | |
| Affected OS | Linux, BSD, Solaris, Other |
| Affected App | Other |