ET WEB_SPECIFIC_APPS CandyPress Store XSS Attempt -- prodList.asp brand

SID: 2004569Rev: 80 viewsHistory

Sourceet/open

CreatedJuly 30, 2010

UpdatedMarch 10, 2024

Classificationweb-application-attack

alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS CandyPress Store XSS Attempt -- prodList.asp brand"; flow:established,to_server; http.uri; content:"/scripts/prodList.asp?"; fast_pattern; nocase; content:"brand="; nocase; content:"script"; nocase; pcre:"/script>?.*<.+\/script>?/i"; reference:cve,CVE-2007-2804; reference:url,www.secunia.com/advisories/25370; classtype:web-application-attack; sid:2004569; rev:8; metadata:created_at 2010_07_30, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_10;)

References

cve	CVE-2007-2804
url	www.secunia.com/advisories/25370

Metadata

created at2010_07_30

signature severityMajor

tagDescription_Generated_By_Proofpoint_Nexus

updated at2024_03_10

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!