Intrusion PreventionPHP.URI.Code.Injection
Description
This indicates an attempt to exploit a remote code execution vulnerability in PHP.
The vulnerability may allow attackers to execute arbitrary code on remote systems by including PHP sequences in some parameters.
Affected Products
Any website that runs any PHP software which allows remote code execution is vulnerable.
Impact
System compromise: remote PHP code execution.
Recommended Actions
If a FortiGate with FortiOS 2.80 or above is used, select "drop" as the default action for the signature.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2021-05-03 | 18.071 |
Modified
|
Sig Added |
| 2019-08-27 | 14.677 |
Modified
|
Default_action:pass:drop |
| 2019-07-31 | 14.662 |
Modified
|
Sig Added |
| 2019-05-21 | 14.617 |
Modified
|
Status:disable:enable |
| 2019-05-15 | 14.614 |
Modified
|
Sig Added |
| 2019-05-10 | 14.612 |
Modified
|
Sig Added |
| 2019-05-07 | 14.608 |
Modified
|
Sig Added |
| ID | 15463 |
| Created | Mar 10, 2008 |
| Updated | Apr 30, 2021 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |
| Profile Type | Code Injection |