SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.
SERVER-WEBAPP PHP PHP-CGI command execution attempt
This rule looks for specific characters that may get remapped by PHP and permit this command injection to occur.
This rule alerts when Snort detects a command injection attempt against PHP running in GCI mode on Apache on Windows.
No public information
No known false positives
Cisco Talos Intelligence Group
Rule Categories::Server::Web Applications
MITRE::ATT&CK Framework::Enterprise::Initial Access::Exploit Public-Facing Application
Command Injection
Command Injection attacks target applications that allow unsafe user-supplied input. Attackers transmit this input via forms, cookies, HTTP headers, etc. and exploit the applications permissions to execute system commands without injecting code.
CVE-2024-4577 |
Loading description
|