Intrusion PreventionPhpSlash.Fields.Parameter.Command.Execution
Description
This indicates an attack attempt against a remote command-execution vulnerability in phpSlash.
A vulnerability has been reported in phpSlash that may allow an attacker to execute shell commands on a vulnerable system. This is possible because the user input filters fail to properly sanitize the field parameter value that is passed to "index.php". An attacker may include shell commands by supplying an injection string through the URL.
Affected Products
PHPSlash 0.8.1 1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Currently we are not aware of any patches supplied by the vendor for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 25541 |
| Created | Mar 01, 2011 |
| Updated | Apr 23, 2014 |
| Risk |
|
| CVE ID | CVE-2009-0517 |
| Exploit Prediction Score | 15.64% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |