Intrusion PreventionPHP.Malicious.Shell
Description
This indicates an attempt to use a malicious PHP page.
Most malicious PHP script is used to execute command within the privileges of the web applications. And some will be used to launch attack or send spam emails.
Affected Products
Any compromised PHP server
Impact
System Compromise: Remote attacker can gain control of vulnerable systems.
Recommended Actions
Remove malicious php file from the system.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 44580 |
| Created | Oct 06, 2017 |
| Updated | Jan 02, 2024 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | PHP_app |