Versions (4)
Version DetailsCurrent
Rev: 6 • Jul 30, 2010, 12:00 PMET WEB_SPECIFIC_APPS Possible CactuShop User Invoices Persistent XSS Attempt
alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Possible CactuShop User Invoices Persistent XSS Attempt"; flow:established,to_server; http.uri; content:"_invoice.asp"; nocase; content:"script>"; nocase; pcre:"/(alert|onmouse[a-z]+|onkey[a-z]+|onload|onunload|ondragdrop|onblur|onfocus|onclick|ondblclick|onsubmit|onreset|onselect|onchange)/i"; reference:url,www.coresecurity.com/content/cactushop-xss-persistent-vulnerability; reference:cve,2010-1486; classtype:web-application-attack; sid:2011054; rev:6; metadata:created_at 2010_07_30, cve CVE_2010_1486, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_09_10;)
Jul 30, 2010, 12:00 PM
Sep 10, 2020, 12:00 PM
Sep 21, 2024, 3:00 AM
Oct 27, 2025, 10:34 PM
rules/emerging-web_specific_apps.rules