SID 1:25528

Rule Category

SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.

Alert Message

SERVER-WEBAPP Moveable Type unauthenticated remote command execution attempt

Rule Explanation

Detects an unauthenticated remote command execution attempt against Movable Type. Impact: Administrative access to the victim's machine. Details: Rule checks for a command injection attempt against the Movable Type web server. Ease of Attack: Simple; PoC publicly-available

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Talos research team.