ET WEB_SERVER ColdFusion path disclosure to get the absolute path

SID: 2016841Rev: 50 viewsHistory

Sourceet/open

CreatedMay 9, 2013

UpdatedApril 24, 2020

Classificationweb-application-attack

alert http any any -> $HTTP_SERVERS any (msg:"ET WEB_SERVER ColdFusion path disclosure to get the absolute path"; flow:established,to_server; http.method; content:"GET"; nocase; http.uri; content:"/administrator/analyzer/index.cfm"; nocase; http.uri.raw; content:"|2e 2e 2f|"; reference:url,www.exploit-db.com/exploits/25305/; classtype:web-application-attack; sid:2016841; rev:5; metadata:created_at 2013_05_09, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_04_24;)

References

url	www.exploit-db.com/exploits/25305/

Metadata

created at2013_05_09

signature severityInformational

tagDescription_Generated_By_Proofpoint_Nexus

updated at2020_04_24

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!