Signature Detail
Short Name |
HTTP:MISC:OPENSIS-PARAM-PHP-INJ |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Opensis Modname Parameter Remote PHP Code Injection |
Release Date |
2015/06/09 |
Update Number |
2503 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Opensis Modname Parameter Remote PHP Code Injection
This signature detects attempts to exploit a known vulnerability against Opensis. A successful exploit can lead to remote php code injection.
Extended Description
Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter.
Affected Products
- opensis 4.5
- opensis 4.6
- opensis 4.7
- opensis 4.8
- opensis 4.8.1
- opensis 4.9
- opensis 5.0
- opensis 5.1
- opensis 5.2
References
- CVE: CVE-2013-1349