PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.
References
Link | Resource |
---|---|
https://sitewat.ch/Advisory/View/7 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-12-28 20:15
Updated : 2011-12-28 21:00
NVD link : CVE-2011-5021
Mitre link : CVE-2011-5021
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
phpids
- phpids