# Ruleset Update Summary - 2026/09/04 - v11274 **URL:** \ **Category:** Ruleset Updates\ **Created:** [September 4, 2026, 4:37pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-09-04-v11274/3438 "2026-09-04T16:37:11Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [September 4, 2026, 4:37pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-09-04-v11274/3438/1 "2026-09-04T16:37:11Z")
## Summary: 0 new OPEN, 0 new PRO (0 + 0) * * * ## Modified inactive rules: - 2000342 - ET EXPLOIT Squid NTLM Auth Overflow Exploit (exploit.rules) - 2000372 - ET EXPLOIT MS-SQL SQL Injection running SQL statements line comment (exploit.rules) - 2000373 - ET EXPLOIT MS-SQL SQL Injection line comment (exploit.rules) - 2001048 - ET WEB\_CLIENT IE process injection iexplore.exe executable download (web\_client.rules) - 2001099 - ET WEB\_CLIENT Attempt to execute VBScript code (web\_client.rules) - 2001101 - ET WEB\_CLIENT Stealth attempt to execute Javascript code (web\_client.rules) - 2001102 - ET WEB\_CLIENT Stealth attempt to execute VBScript code (web\_client.rules) - 2001103 - ET WEB\_CLIENT Stealth attempt to access SHELL#=#= (web\_client.rules) - 2001105 - ET WEB\_CLIENT Javascript execution with expression eval (web\_client.rules) - 2001106 - ET WEB\_CLIENT Javascript execution with expression eval hex (web\_client.rules) - 2001182 - ET WEB\_CLIENT IE trojan Ants3set 1.exe - process injection (web\_client.rules) - 2001217 - ET EXPLOIT Adobe Acrobat Reader Malicious URL Null Byte (exploit.rules) - 2001218 - ET WEB\_SPECIFIC\_APPS PHPNuke general XSS attempt (web\_specific\_apps.rules) - 2001686 - ET WEB\_SPECIFIC\_APPS Awstats Remote Code Execution Attempt (web\_specific\_apps.rules) - 2001742 - ET EXPLOIT Arkeia full remote access without password or authentication (exploit.rules) - 2001874 - ET EXPLOIT TCP Reset from MS Exchange after chunked data, probably crashed it (MS05-021) (exploit.rules) - 2001949 - ET WEB\_SPECIFIC\_APPS Athena Web Registration Remote Command Execution Attempt (web\_specific\_apps.rules) - 2002066 - ET WEB\_SPECIFIC\_APPS CSV-DB CSV\_DB.CGI Remote Command Execution Attempt (web\_specific\_apps.rules) - 2002069 - ET WEB\_SPECIFIC\_APPS Blog Spam Insert Attempt (web\_specific\_apps.rules) - 2002070 - ET WEB\_SPECIFIC\_APPS phpBB Remote Code Execution Attempt (web\_specific\_apps.rules) - 2002100 - ET WEB\_SPECIFIC\_APPS WPS wps\_shop.cgi Remote Command Execution Attempt (web\_specific\_apps.rules) - 2002129 - ET WEB\_SPECIFIC\_APPS Cacti Input Validation Attack (web\_specific\_apps.rules) - 2002181 - ET EXPLOIT Backup Exec Windows Agent Remote File Access - Attempt (exploit.rules) - 2002182 - ET EXPLOIT Backup Exec Windows Agent Remote File Access - Vulnerable (exploit.rules) - 2002313 - ET WEB\_SPECIFIC\_APPS Cacti graph\_image.php Remote Command Execution Attempt (web\_specific\_apps.rules) - 2002314 - ET WEB\_SPECIFIC\_APPS PHPOutsourcing Zorum prod.php Remote Command Execution Attempt (web\_specific\_apps.rules) - 2002331 - ET WEB\_SPECIFIC\_APPS Piranha default passwd attempt (web\_specific\_apps.rules) - 2002381 - ET WEB\_CLIENT RealPlayer/Helix Player Format String Exploit (web\_client.rules) - 2002494 - ET WEB\_SPECIFIC\_APPS Versatile Bulletin Board SQL Injection Attack (web\_specific\_apps.rules) - 2002656 - ET EXPLOIT malformed Sack - Snort DoS-by-$um$id (exploit.rules) - 2002662 - ET WEB\_SPECIFIC\_APPS TWiki INCLUDE remote command execution attempt (web\_specific\_apps.rules) - 2002681 - ET WEB\_SPECIFIC\_APPS Mambo Exploit (web\_specific\_apps.rules) - 2002697 - ET WEB\_SPECIFIC\_APPS CVSTrac filediff Arbitrary Remote Code Execution (web\_specific\_apps.rules) - 2002702 - ET WEB\_SPECIFIC\_APPS OSTicket Remote Code Execution Attempt (web\_specific\_apps.rules) - 2002784 - ET EXPLOIT Java private function call sun.misc.unsafe (exploit.rules) - 2002800 - ET WEB\_SPECIFIC\_APPS PHP PHPNuke Remote File Inclusion Attempt (web\_specific\_apps.rules) - 2002803 - ET EXPLOIT BMP with invalid bfOffBits (exploit.rules) - 2002815 - ET WEB\_SPECIFIC\_APPS Plume CMS prepend.php Remote File Inclusion attempt (web\_specific\_apps.rules) - 2002837 - ET WEB\_SPECIFIC\_APPS PmWiki Globals Variables Overwrite Attempt (web\_specific\_apps.rules) - 2002849 - ET WEB\_SPECIFIC\_APPS Google Appliance External Proxy Stylesheet (web\_specific\_apps.rules) - 2002852 - ET EXPLOIT HP-UX Printer LPD Command Insertion (exploit.rules) - 2002867 - ET WEB\_SPECIFIC\_APPS Horde 3.0.9-3.1.0 Help Viewer Remote PHP Exploit (web\_specific\_apps.rules) - 2002868 - ET WEB\_SPECIFIC\_APPS Horde Web Mail Help Access (web\_specific\_apps.rules) - 2002896 - ET EXPLOIT Symantec Scan Engine Request Password Hash (exploit.rules) - 2002897 - ET WEB\_SPECIFIC\_APPS Horde README access probe (web\_specific\_apps.rules) - 2002898 - ET WEB\_SPECIFIC\_APPS PHP Web Calendar Remote File Inclusion Attempt (web\_specific\_apps.rules) - 2002899 - ET WEB\_SPECIFIC\_APPS PHP VWar Remote File Inclusion get\_header.php (web\_specific\_apps.rules) - 2002902 - ET WEB\_SPECIFIC\_APPS PHP VWar Remote File Inclusion functions\_install.php (web\_specific\_apps.rules) - 2002913 - ET EXPLOIT VNC Client response (exploit.rules) - 2002914 - ET EXPLOIT VNC Server VNC Auth Offer (exploit.rules) - 2002915 - ET EXPLOIT VNC Authentication Reply (exploit.rules) - 2002918 - ET EXPLOIT VNC Server VNC Auth Offer - No Challenge string (exploit.rules) - 2002919 - ET EXPLOIT VNC Good Authentication Reply (exploit.rules) - 2002921 - ET EXPLOIT VNC Multiple Authentication Failures (exploit.rules) - 2002923 - ET EXPLOIT VNC Server Not Requiring Authentication (case 2) (exploit.rules) - 2002924 - ET EXPLOIT VNC Server Not Requiring Authentication (exploit.rules) - 2002996 - ET WEB\_SPECIFIC\_APPS GeekLog Remote File Include Vulnerability (web\_specific\_apps.rules) - 2003023 - ET WEB\_CLIENT IE StructuredGraphicsControl SourceURL Bug MoBB#6 (web\_client.rules) - 2003085 - ET WEB\_SPECIFIC\_APPS TWiki Configure Script TYPEOF Remote Command Execution Attempt (web\_specific\_apps.rules) - 2003110 - ET WEB\_CLIENT MSIE WebViewFolderIcon setSlice invalid memory copy (web\_client.rules) - 2003167 - ET WEB\_SPECIFIC\_APPS tikiwiki featured link XSS attempt (web\_specific\_apps.rules) - 2003196 - ET EXPLOIT FTP .message file write (exploit.rules) - 2003250 - ET EXPLOIT Symantec Remote Management RTVScan Exploit (exploit.rules) - 2003333 - ET WEB\_SPECIFIC\_APPS PHP Gnopaster Common.php remote file include (web\_specific\_apps.rules) - 2003334 - ET WEB\_SPECIFIC\_APPS Cacti cmd.php Remote Arbitrary SQL Command Execution Attempt (web\_specific\_apps.rules) - 2003371 - ET WEB\_SPECIFIC\_APPS PHP Portail Includes.php remote file include (web\_specific\_apps.rules) - 2003372 - ET WEB\_SPECIFIC\_APPS PHPEventMan remote file include (web\_specific\_apps.rules) - 2003379 - ET EXPLOIT Computer Associates BrightStor ARCserve Backup for Laptops LGServer.exe DoS (exploit.rules) - 2003400 - ET EXPLOIT US-ASCII Obfuscated script (exploit.rules) - 2003401 - ET EXPLOIT US-ASCII Obfuscated VBScript download file (exploit.rules) - 2003402 - ET EXPLOIT US-ASCII Obfuscated VBScript execute command (exploit.rules) - 2003403 - ET EXPLOIT US-ASCII Obfuscated VBScript (exploit.rules) - 2003411 - ET EXPLOIT Solaris telnet USER environment vuln Attack inbound (exploit.rules) - 2003412 - ET EXPLOIT Solaris telnet USER environment vuln Attack outbound (exploit.rules) - 2003508 - ET WEB\_SPECIFIC\_APPS Wordpress wp-login.php redirect\_to credentials stealing attempt (web\_specific\_apps.rules) - 2003516 - ET WEB\_SPECIFIC\_APPS Xoops Articles modules print.php SQL injection attempt (web\_specific\_apps.rules) - 2003517 - ET WEB\_SPECIFIC\_APPS iPhotoAlbum header.php remote file include (web\_specific\_apps.rules) - 2003520 - ET WEB\_SPECIFIC\_APPS webCalendar Remote File include (web\_specific\_apps.rules) - 2003660 - ET WEB\_SPECIFIC\_APPS Persism CMS Remote Inclusion Attempt - Headerfile.php System (web\_specific\_apps.rules) - 2003661 - ET WEB\_SPECIFIC\_APPS Persism CMS Remote Inclusion Attempt – latest\_files.php System (web\_specific\_apps.rules) - 2003662 - ET WEB\_SPECIFIC\_APPS Persism CMS Remote Inclusion Attempt – latest\_posts.php System (web\_specific\_apps.rules) - 2003663 - ET WEB\_SPECIFIC\_APPS Persism CMS Remote Inclusion Attempt – groups\_headerfile.php System (web\_specific\_apps.rules) - 2003664 - ET WEB\_SPECIFIC\_APPS Persism CMS Remote Inclusion Attempt – filters\_headerfile.php System (web\_specific\_apps.rules) - 2003665 - ET WEB\_SPECIFIC\_APPS Persism CMS Remote Inclusion Attempt – links.php System (web\_specific\_apps.rules) - 2003666 - ET WEB\_SPECIFIC\_APPS Persism CMS Remote Inclusion Attempt – menu\_headerfile.php System (web\_specific\_apps.rules) - 2003667 - ET WEB\_SPECIFIC\_APPS Persism CMS Remote Inclusion Attempt – latest\_news.php System (web\_specific\_apps.rules) - 2003668 - ET WEB\_SPECIFIC\_APPS Persism CMS Remote Inclusion Attempt – settings\_headerfile.php System (web\_specific\_apps.rules) - 2003669 - ET WEB\_SPECIFIC\_APPS TopTree Remote Inclusion Attempt – tpl\_message.php right\_file (web\_specific\_apps.rules) - 2003670 - ET WEB\_SPECIFIC\_APPS Workbench Survival Guide Remote Inclusion Attempt – headerfile.php path (web\_specific\_apps.rules) - 2003671 - ET WEB\_SPECIFIC\_APPS Versado CMS Remote Inclusion Attempt – ajax\_listado.php urlModulo (web\_specific\_apps.rules) - 2003672 - ET WEB\_SPECIFIC\_APPS PMECMS Remote Inclusion Attempt – mod\_image\_index.php config pathMod (web\_specific\_apps.rules) - 2003673 - ET WEB\_SPECIFIC\_APPS PMECMS Remote Inclusion Attempt – mod\_liens\_index.php config pathMod (web\_specific\_apps.rules) - 2003674 - ET WEB\_SPECIFIC\_APPS PMECMS Remote Inclusion Attempt – mod\_liste\_index.php config pathMod (web\_specific\_apps.rules) - 2003675 - ET WEB\_SPECIFIC\_APPS PMECMS Remote Inclusion Attempt – mod\_special\_index.php config pathMod (web\_specific\_apps.rules) - 2003676 - ET WEB\_SPECIFIC\_APPS PMECMS Remote Inclusion Attempt – mod\_texte\_index.php config pathMod (web\_specific\_apps.rules) - 2003677 - ET WEB\_SPECIFIC\_APPS Berylium2 Remote Inclusion Attempt – berylium-classes.php beryliumroot (web\_specific\_apps.rules) - 2003678 - ET WEB\_SPECIFIC\_APPS Tropicalm Remote Inclusion Attempt – dosearch.php RESPATH (web\_specific\_apps.rules) - 2003679 - ET WEB\_SPECIFIC\_APPS DynamicPAD Remote Inclusion Attempt – dp\_logs.php HomeDir (web\_specific\_apps.rules) - 2003680 - ET WEB\_SPECIFIC\_APPS DynamicPAD Remote Inclusion Attempt – index.php HomeDir (web\_specific\_apps.rules) - 2003681 - ET WEB\_SPECIFIC\_APPS Persism CMS Remote Inclusion Attempt – users\_headerfile.php System (web\_specific\_apps.rules) - 2003682 - ET WEB\_SPECIFIC\_APPS E-Gads Remote Inclusion Attempt – common.php locale (web\_specific\_apps.rules) - 2003683 - ET WEB\_SPECIFIC\_APPS PHP Turbulence Remote Inclusion Attempt – turbulence.php GLOBALS tcore (web\_specific\_apps.rules) - 2003684 - ET WEB\_SPECIFIC\_APPS MXBB Remote Inclusion Attempt – faq.php module\_root\_path (web\_specific\_apps.rules) - 2003685 - ET WEB\_SPECIFIC\_APPS Wordpress Remote Inclusion Attempt – wptable-button.php wpPATH (web\_specific\_apps.rules) - 2003686 - ET WEB\_SPECIFIC\_APPS Wordpress Remote Inclusion Attempt – wordtube-button.php wpPATH (web\_specific\_apps.rules) - 2003687 - ET WEB\_SPECIFIC\_APPS TurnKeyWebTools Remote Inclusion Attempt – payflow\_pro.php abs\_path (web\_specific\_apps.rules) - 2003688 - ET WEB\_SPECIFIC\_APPS TurnKeyWebTools Remote Inclusion Attempt – global.php abs\_path (web\_specific\_apps.rules) - 2003689 - ET WEB\_SPECIFIC\_APPS TurnKeyWebTools Remote Inclusion Attempt – libsecure.php abs\_path (web\_specific\_apps.rules) - 2003690 - ET WEB\_SPECIFIC\_APPS Firefly Remote Inclusion Attempt – config.php DOCUMENT\_ROOT (web\_specific\_apps.rules) - 2003691 - ET WEB\_SPECIFIC\_APPS Pixaria Gallery Remote Inclusion Attempt – psg.smarty.lib.php cfg sys base\_path (web\_specific\_apps.rules) - 2003692 - ET WEB\_SPECIFIC\_APPS VM Watermark Remote Inclusion Attempt – watermark.php GALLERY\_BASEDIR (web\_specific\_apps.rules) - 2003693 - ET WEB\_SPECIFIC\_APPS PHPtree Remote Inclusion Attempt – cms2.php s\_dir (web\_specific\_apps.rules) - 2003694 - ET WEB\_SPECIFIC\_APPS NoAH Remote Inclusion Attempt – mfa\_theme.php tpls (web\_specific\_apps.rules) - 2003696 - ET WEB\_SPECIFIC\_APPS Wikivi5 Remote Inclusion Attempt – show.php sous\_rep (web\_specific\_apps.rules) - 2003698 - ET WEB\_SPECIFIC\_APPS pfa CMS Remote Inclusion index.php abs\_path (web\_specific\_apps.rules) - 2003699 - ET WEB\_SPECIFIC\_APPS pfa CMS Remote Inclusion checkout.php abs\_path (web\_specific\_apps.rules) - 2003700 - ET WEB\_SPECIFIC\_APPS pfa CMS Remote Inclusion libsecure.php abs\_path (web\_specific\_apps.rules) - 2003701 - ET WEB\_SPECIFIC\_APPS pfa CMS Remote Inclusion index.php repinc (web\_specific\_apps.rules) - 2003702 - ET WEB\_SPECIFIC\_APPS Pixaria Gallery Remote Inclusion class.Smarty.php cfg sys base\_path (web\_specific\_apps.rules) - 2003703 - ET WEB\_SPECIFIC\_APPS phpMyPortal Remote Inclusion Attempt – articles.inc.php GLOBALS CHEMINMODULES (web\_specific\_apps.rules) - 2003704 - ET WEB\_SPECIFIC\_APPS AForum Remote Inclusion func.php CommonAbsDir (web\_specific\_apps.rules) - 2003705 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion site\_conf.php ordnertiefe (web\_specific\_apps.rules) - 2003706 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion class.csv.php tt\_docroot (web\_specific\_apps.rules) - 2003707 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion produkte\_nach\_serie.php tt\_docroot (web\_specific\_apps.rules) - 2003708 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion ref\_kd\_rubrik.php tt\_docroot (web\_specific\_apps.rules) - 2003709 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion hg\_referenz\_jobgalerie.php tt\_docroot (web\_specific\_apps.rules) - 2003710 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion surfer\_anmeldung\_NWL.php tt\_docroot (web\_specific\_apps.rules) - 2003711 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion produkte\_nach\_serie\_alle.php tt\_docroot (web\_specific\_apps.rules) - 2003712 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion surfer\_aendern.php tt\_docroot (web\_specific\_apps.rules) - 2003713 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion referenz.php tt\_docroot (web\_specific\_apps.rules) - 2003714 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion lay.php tt\_docroot (web\_specific\_apps.rules) - 2003715 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion ref\_kd\_rubrik.php tt\_docroot (web\_specific\_apps.rules) - 2003716 - ET WEB\_SPECIFIC\_APPS LaVague Remote Inclusion Attempt – printbar.php views\_path (web\_specific\_apps.rules) - 2003717 - ET WEB\_SPECIFIC\_APPS miplex2 Remote Inclusion SmartyFU.class.php system (web\_specific\_apps.rules) - 2003718 - ET WEB\_SPECIFIC\_APPS gnuedu Remote Inclusion Attempt – lom.php ETCDIR (web\_specific\_apps.rules) - 2003719 - ET WEB\_SPECIFIC\_APPS gnuedu Remote Inclusion Attempt – lom\_update.php ETCDIR (web\_specific\_apps.rules) - 2003720 - ET WEB\_SPECIFIC\_APPS gnuedu Remote Inclusion Attempt – check-lom.php ETCDIR (web\_specific\_apps.rules) - 2003721 - ET WEB\_SPECIFIC\_APPS gnuedu Remote Inclusion Attempt – weigh\_keywords.php ETCDIR (web\_specific\_apps.rules) - 2003722 - ET WEB\_SPECIFIC\_APPS gnuedu Remote Inclusion Attempt – logout.php ETCDIR (web\_specific\_apps.rules) - 2003723 - ET WEB\_SPECIFIC\_APPS gnuedu Remote Inclusion Attempt – help.php ETCDIR (web\_specific\_apps.rules) - 2003724 - ET WEB\_SPECIFIC\_APPS gnuedu Remote Inclusion Attempt – index.php ETCDIR (web\_specific\_apps.rules) - 2003725 - ET WEB\_SPECIFIC\_APPS gnuedu Remote Inclusion Attempt – login.php ETCDIR (web\_specific\_apps.rules) - 2003726 - ET WEB\_SPECIFIC\_APPS CGX Remote Inclusion Attempt – mtdialogo.php pathCGX (web\_specific\_apps.rules) - 2003727 - ET WEB\_SPECIFIC\_APPS CGX Remote Inclusion Attempt – ltdialogo.php pathCGX (web\_specific\_apps.rules) - 2003728 - ET WEB\_SPECIFIC\_APPS CGX Remote Inclusion Attempt – logingecon.php pathCGX (web\_specific\_apps.rules) - 2003729 - ET WEB\_SPECIFIC\_APPS CGX Remote Inclusion Attempt – login.php pathCGX (web\_specific\_apps.rules) - 2003730 - ET WEB\_SPECIFIC\_APPS PHPHtmlLib Remote Inclusion Attempt – widget8.php phphtmllib (web\_specific\_apps.rules) - 2003731 - ET WEB\_SPECIFIC\_APPS PHPLojaFacil Remote Inclusion Attempt – ftp.php path\_local (web\_specific\_apps.rules) - 2003732 - ET WEB\_SPECIFIC\_APPS PHPLojaFacil Remote Inclusion Attempt – db.php path\_local (web\_specific\_apps.rules) - 2003733 - ET WEB\_SPECIFIC\_APPS PHPLojaFacil Remote Inclusion Attempt – libs\_ftp.php path\_local (web\_specific\_apps.rules) - 2003735 - ET WEB\_SPECIFIC\_APPS PHPSecurityAdmin Remote Inclusion Attempt – logout.php PSA\_PATH (web\_specific\_apps.rules) - 2003736 - ET WEB\_SPECIFIC\_APPS AForum Remote Inclusion Attempt – errormsg.php header (web\_specific\_apps.rules) - 2003737 - ET WEB\_SPECIFIC\_APPS CJG Explorer Remote Inclusion Attempt – pcltrace.lib.php g\_pcltar\_lib\_dir (web\_specific\_apps.rules) - 2003738 - ET WEB\_SPECIFIC\_APPS Beacon Remote Inclusion Attempt – splash.lang.php languagePath (web\_specific\_apps.rules) - 2003739 - ET WEB\_SPECIFIC\_APPS Yaap Remote Inclusion Attempt – common.php root\_path (web\_specific\_apps.rules) - 2003740 - ET WEB\_SPECIFIC\_APPS PHPFirstPost Remote Inclusion Attempt block.php Include (web\_specific\_apps.rules) - 2003741 - ET WEB\_SPECIFIC\_APPS Open Translation Engine Remote Inclusion Attempt – header.php ote\_home (web\_specific\_apps.rules) - 2003742 - ET WEB\_SPECIFIC\_APPS PHPChess Remote Inclusion Attempt – language.php config (web\_specific\_apps.rules) - 2003743 - ET WEB\_SPECIFIC\_APPS PHPChess Remote Inclusion Attempt – layout\_admin\_cfg.php Root\_Path (web\_specific\_apps.rules) - 2003744 - ET WEB\_SPECIFIC\_APPS PHPChess Remote Inclusion Attempt – layout\_cfg.php Root\_Path (web\_specific\_apps.rules) - 2003745 - ET WEB\_SPECIFIC\_APPS PHPChess Remote Inclusion Attempt – layout\_t\_top.php Root\_Path (web\_specific\_apps.rules) - 2003746 - ET WEB\_SPECIFIC\_APPS Simple PHP Script Gallery Remote Inclusion index.php gallery (web\_specific\_apps.rules) - 2003747 - ET WEB\_SPECIFIC\_APPS gnuedu Remote Inclusion Attempt – lom.php ETCDIR (web\_specific\_apps.rules) - 2003867 - ET WEB\_SPECIFIC\_APPS TellTarget CMS Remote Inclusion 3\_lay.php tt\_docroot (web\_specific\_apps.rules) - 2003871 - ET WEB\_SPECIFIC\_APPS Ripe Website Manager XSS Attempt – index.php ripeformpost (web\_specific\_apps.rules) - 2003872 - ET WEB\_SPECIFIC\_APPS Redoable XSS Attempt – searchloop.php s (web\_specific\_apps.rules) - 2003873 - ET WEB\_SPECIFIC\_APPS Redoable XSS Attempt – header.php s (web\_specific\_apps.rules) - 2003874 - ET WEB\_SPECIFIC\_APPS vDesk Webmail XSS Attempt – printcal.pl (web\_specific\_apps.rules) - 2003875 - ET WEB\_SPECIFIC\_APPS fotolog XSS Attempt – all\_photos.html user (web\_specific\_apps.rules) - 2003876 - ET WEB\_SPECIFIC\_APPS EQdkp XSS Attempt – listmembers.php show (web\_specific\_apps.rules) - 2003877 - ET WEB\_SPECIFIC\_APPS EQdkp XSS Attempt – stats.php show (web\_specific\_apps.rules) - 2003878 - ET WEB\_SPECIFIC\_APPS Open Translation Engine (OTE) XSS Attempt – header.php ote\_home (web\_specific\_apps.rules) - 2003879 - ET WEB\_SPECIFIC\_APPS PHPChain XSS Attempt – settings.php catid (web\_specific\_apps.rules) - 2003880 - ET WEB\_SPECIFIC\_APPS PHPChain XSS Attempt – cat.php catid (web\_specific\_apps.rules) - 2003881 - ET WEB\_SPECIFIC\_APPS SonicBB XSS Attempt – search.php part (web\_specific\_apps.rules) - 2003882 - ET WEB\_SPECIFIC\_APPS PHP Multi User Randomizer (phpMUR) XSS Attempt – configure\_plugin.tpl.php edit\_plugin (web\_specific\_apps.rules) - 2003883 - ET WEB\_SPECIFIC\_APPS PHP Multi User Randomizer (phpMUR) XSS Attempt – phpinfo.php 1 (web\_specific\_apps.rules) - 2003884 - ET WEB\_SPECIFIC\_APPS PHP Multi User Randomizer (phpMUR) XSS Attempt – phpinfo.php a (web\_specific\_apps.rules) - 2003885 - ET WEB\_SPECIFIC\_APPS WordPress XSS Attempt – sidebar.php (web\_specific\_apps.rules) - 2003886 - ET WEB\_SPECIFIC\_APPS All In One Control Panel (AIOCP) XSS Attempt – cp\_authorization.php (web\_specific\_apps.rules) - 2003887 - ET WEB\_SPECIFIC\_APPS All In One Control Panel (AIOCP) XSS Attempt – cp\_config.php (web\_specific\_apps.rules) - 2003888 - ET WEB\_SPECIFIC\_APPS TutorialCMS (Photoshop Tutorials) XSS Attempt – browseCat.php catFile (web\_specific\_apps.rules) - 2003889 - ET WEB\_SPECIFIC\_APPS TutorialCMS (Photoshop Tutorials) XSS Attempt – browseSubCat.php catFile (web\_specific\_apps.rules) - 2003890 - ET WEB\_SPECIFIC\_APPS TutorialCMS (Photoshop Tutorials) XSS Attempt – openTutorial.php id (web\_specific\_apps.rules) - 2003891 - ET WEB\_SPECIFIC\_APPS TutorialCMS (Photoshop Tutorials) XSS Attempt – topFrame.php id (web\_specific\_apps.rules) - 2003892 - ET WEB\_SPECIFIC\_APPS TutorialCMS (Photoshop Tutorials) XSS Attempt – editListing.php id (web\_specific\_apps.rules) - 2003893 - ET WEB\_SPECIFIC\_APPS TutorialCMS (Photoshop Tutorials) XSS Attempt – search.php search (web\_specific\_apps.rules) - 2003894 - ET WEB\_SPECIFIC\_APPS Nokia Intellisync Mobile Suite XSS Attempt – dev\_logon.asp username (web\_specific\_apps.rules) - 2003895 - ET WEB\_SPECIFIC\_APPS Nokia Intellisync Mobile Suite XSS Attempt – registerAccount.asp (web\_specific\_apps.rules) - 2003896 - ET WEB\_SPECIFIC\_APPS Nokia Intellisync Mobile Suite XSS Attempt – create\_account.asp (web\_specific\_apps.rules) - 2003897 - ET WEB\_SPECIFIC\_APPS Adobe RoboHelp XSS Attempt whstart.js (web\_specific\_apps.rules) - 2003898 - ET WEB\_SPECIFIC\_APPS Adobe RoboHelp XSS Attempt whcsh\_home.htm (web\_specific\_apps.rules) - 2003899 - ET WEB\_SPECIFIC\_APPS Adobe RoboHelp XSS Attempt wf\_startpage.js (web\_specific\_apps.rules) - 2003900 - ET WEB\_SPECIFIC\_APPS Adobe RoboHelp XSS Attempt wf\_startqs.htm (web\_specific\_apps.rules) - 2003901 - ET WEB\_SPECIFIC\_APPS Adobe RoboHelp XSS Attempt WindowManager.dll (web\_specific\_apps.rules) - 2003902 - ET WEB\_SPECIFIC\_APPS Apache Tomcat XSS Attempt – implicit-objects.jsp (web\_specific\_apps.rules) - 2003905 - ET WEB\_SPECIFIC\_APPS ACP3 XSS Attempt – index.php form mods (web\_specific\_apps.rules) - 2003906 - ET WEB\_SPECIFIC\_APPS ACP3 XSS Attempt – index.php form (web\_specific\_apps.rules) - 2003907 - ET WEB\_SPECIFIC\_APPS ACP3 XSS Attempt – download.php id (web\_specific\_apps.rules) - 2003908 - ET WEB\_SPECIFIC\_APPS ACP3 XSS Attempt – index.php form cat (web\_specific\_apps.rules) - 2003909 - ET WEB\_SPECIFIC\_APPS ACP3 XSS Attempt – index.php form cat (web\_specific\_apps.rules) - 2003910 - ET WEB\_SPECIFIC\_APPS ACP3 XSS Attempt – index.php form name (web\_specific\_apps.rules) - 2003911 - ET WEB\_SPECIFIC\_APPS ACP3 XSS Attempt – index.php form message (web\_specific\_apps.rules) - 2003912 - ET WEB\_SPECIFIC\_APPS ACP3 XSS Attempt – index.php form mail (web\_specific\_apps.rules) - 2003913 - ET WEB\_SPECIFIC\_APPS Kayako eSupport XSS Attempt – index.php \_m (web\_specific\_apps.rules) - 2003914 - ET WEB\_SPECIFIC\_APPS Podium CMS XSS Attempt – Default.aspx id (web\_specific\_apps.rules) - 2003915 - ET WEB\_SPECIFIC\_APPS Advanced Guestbook XSS Attempt – picture.php picture (web\_specific\_apps.rules) - 2003916 - ET WEB\_SPECIFIC\_APPS WikkaWiki (Wikka Wiki) XSS Attempt – usersettings.php name (web\_specific\_apps.rules) - 2003917 - ET WEB\_SPECIFIC\_APPS TurnkeyWebTools SunShop Shopping Cart XSS Attempt – index.php l (web\_specific\_apps.rules) - 2003918 - ET WEB\_SPECIFIC\_APPS Minh Nguyen Duong Obie Website Mini Web Shop XSS Attempt – sendmail.php (web\_specific\_apps.rules) - 2003919 - ET WEB\_SPECIFIC\_APPS Minh Nguyen Duong Obie Website Mini Web Shop XSS Attempt – order\_form.php (web\_specific\_apps.rules) - 2003920 - ET WEB\_SPECIFIC\_APPS DVDdb XSS Attempt – loan.php movieid (web\_specific\_apps.rules) - 2003921 - ET WEB\_SPECIFIC\_APPS DVDdb XSS Attempt – listmovies.php s (web\_specific\_apps.rules) - 2003922 - ET WEB\_SPECIFIC\_APPS Sendcard XSS Attempt – sendcard.php form (web\_specific\_apps.rules) - 2004552 - ET WEB\_SPECIFIC\_APPS phpPgAdmin XSS Attempt – sqledit.php server (web\_specific\_apps.rules) - 2004554 - ET WEB\_SPECIFIC\_APPS HLstats XSS Attempt – hlstats.php authusername (web\_specific\_apps.rules) - 2004555 - ET WEB\_SPECIFIC\_APPS HLstats XSS Attempt – hlstats.php authpassword (web\_specific\_apps.rules) - 2004557 - ET WEB\_SPECIFIC\_APPS @Mail XSS Attempt – ReadMsg.php (web\_specific\_apps.rules) - 2004558 - ET WEB\_SPECIFIC\_APPS Track+ XSS Attempt – reportItem.do projId (web\_specific\_apps.rules) - 2004559 - ET WEB\_SPECIFIC\_APPS CactuSoft Parodia XSS Attempt – cand\_login.asp strJobIDs (web\_specific\_apps.rules) - 2004560 - ET WEB\_SPECIFIC\_APPS HLstats XSS Attempt – hlstats.php (web\_specific\_apps.rules) - 2004561 - ET WEB\_SPECIFIC\_APPS HLstats XSS Attempt – hlstats.php action (web\_specific\_apps.rules) - 2004562 - ET WEB\_SPECIFIC\_APPS Gnatsweb and Gnats XSS Attempt – gnatsweb.pl database (web\_specific\_apps.rules) - 2004563 - ET WEB\_SPECIFIC\_APPS GaliX XSS Attempt – index.php galix\_cat\_detail (web\_specific\_apps.rules) - 2004564 - ET WEB\_SPECIFIC\_APPS GaliX XSS Attempt – index.php galix\_gal\_detail (web\_specific\_apps.rules) - 2004565 - ET WEB\_SPECIFIC\_APPS GaliX XSS Attempt – index.php galix\_cat\_detail\_sort (web\_specific\_apps.rules) - 2004566 - ET WEB\_SPECIFIC\_APPS ClientExec (CE) XSS Attempt – index.php ticketID (web\_specific\_apps.rules) - 2004567 - ET WEB\_SPECIFIC\_APPS ClientExec (CE) XSS Attempt – index.php view (web\_specific\_apps.rules) - 2004568 - ET WEB\_SPECIFIC\_APPS ClientExec (CE) XSS Attempt – index.php fuse (web\_specific\_apps.rules) - 2004569 - ET WEB\_SPECIFIC\_APPS CandyPress Store XSS Attempt – prodList.asp brand (web\_specific\_apps.rules) - 2004570 - ET WEB\_SPECIFIC\_APPS CandyPress Store XSS Attempt – prodList.asp Msg (web\_specific\_apps.rules) - 2004571 - ET WEB\_SPECIFIC\_APPS RM EasyMail Plus XSS Attempt – Login d (web\_specific\_apps.rules) - 2004572 - ET WEB\_SPECIFIC\_APPS Jetbox CMS XSS Attempt – index.php login (web\_specific\_apps.rules) - 2004573 - ET WEB\_SPECIFIC\_APPS VP-ASP Shopping Cart XSS Attempt – shopcontent.asp type (web\_specific\_apps.rules) - 2004574 - ET WEB\_SPECIFIC\_APPS WikyBlog XSS Attempt sessionRegister.php (web\_specific\_apps.rules) - 2004575 - ET WEB\_SPECIFIC\_APPS Tomcat XSS Attempt – hello.jsp test (web\_specific\_apps.rules) - 2004576 - ET WEB\_SPECIFIC\_APPS Invision Power Board XSS Attempt – module\_bbcodeloader.php (web\_specific\_apps.rules) - 2004577 - ET WEB\_SPECIFIC\_APPS Invision Power Board XSS Attempt – module\_div.php (web\_specific\_apps.rules) - 2004578 - ET WEB\_SPECIFIC\_APPS Invision Power Board XSS Attempt – module\_email.php (web\_specific\_apps.rules) - 2004579 - ET WEB\_SPECIFIC\_APPS Invision Power Board XSS Attempt – module\_image.php (web\_specific\_apps.rules) - 2004580 - ET WEB\_SPECIFIC\_APPS Invision Power Board XSS Attempt – module\_link.php (web\_specific\_apps.rules) - 2004581 - ET WEB\_SPECIFIC\_APPS Invision Power Board XSS Attempt – module\_table.php editorid (web\_specific\_apps.rules) - 2004582 - ET WEB\_SPECIFIC\_APPS Particle Gallery XSS Attempt – search.php order (web\_specific\_apps.rules) - 2004583 - ET WEB\_SPECIFIC\_APPS BoastMachine XSS Attempt – index.php blog (web\_specific\_apps.rules) - 2004584 - ET WEB\_SPECIFIC\_APPS DGNews XSS Attempt – footer.php copyright (web\_specific\_apps.rules) - 2004585 - ET WEB\_SPECIFIC\_APPS DGNews XSS Attempt – news.php catid (web\_specific\_apps.rules) - 2004586 - ET WEB\_SPECIFIC\_APPS GMTT Music Distro XSS Attempt – showown.php st (web\_specific\_apps.rules) - 2004587 - ET WEB\_SPECIFIC\_APPS PsychoStats XSS Attempt – awards.php (web\_specific\_apps.rules) - 2004588 - ET WEB\_SPECIFIC\_APPS PsychoStats XSS Attempt – login.php (web\_specific\_apps.rules) - 2004589 - ET WEB\_SPECIFIC\_APPS PsychoStats XSS Attempt – register.php (web\_specific\_apps.rules) - 2004590 - ET WEB\_SPECIFIC\_APPS PsychoStats XSS Attempt – weapons.php (web\_specific\_apps.rules) - 2004591 - ET WEB\_SPECIFIC\_APPS ClonusWiki XSS Attempt – index.php query (web\_specific\_apps.rules) - 2004592 - ET WEB\_SPECIFIC\_APPS Jelsoft vBulletin XSS Attempt – calendar.php (web\_specific\_apps.rules) - 2004593 - ET WEB\_SPECIFIC\_APPS Dokeos XSS Attempt – editor.php img (web\_specific\_apps.rules) - 2004594 - ET WEB\_SPECIFIC\_APPS ASP-Nuke XSS Attempt – news.asp id (web\_specific\_apps.rules) - 2004595 - ET WEB\_SPECIFIC\_APPS Digirez XSS Attempt – info\_book.asp Room\_name (web\_specific\_apps.rules) - 2004596 - ET WEB\_SPECIFIC\_APPS Digirez XSS Attempt – week.asp curYear (web\_specific\_apps.rules) - 2007874 - ET EXPLOIT Now SMS/MMS Gateway HTTP BOF Vulnerability (exploit.rules) - 2007875 - ET EXPLOIT Now SMS/MMS Gateway SMPP BOF Vulnerability (exploit.rules) - 2007889 - ET WEB\_SPECIFIC\_APPS Cacti SQL Injection Vulnerability graph\_view graph\_list UNION SELECT (web\_specific\_apps.rules) - 2007890 - ET WEB\_SPECIFIC\_APPS Cacti SQL Injection Vulnerability graph\_view graph\_list INSERT (web\_specific\_apps.rules) - 2007891 - ET WEB\_SPECIFIC\_APPS Cacti SQL Injection Vulnerability graph\_view graph\_list DELETE (web\_specific\_apps.rules) - 2007892 - ET WEB\_SPECIFIC\_APPS Cacti SQL Injection Vulnerability graph\_view graph\_list UPDATE (web\_specific\_apps.rules) - 2008170 - ET WEB\_CLIENT Microsoft Internet Explorer ieframe.dll Script Injection Vulnerability (web\_client.rules) - 2008439 - ET WEB\_SPECIFIC\_APPS AlstraSoft Affiliate Network Pro (pgm) Parameter SQL Injection (web\_specific\_apps.rules) - 2008648 - ET WEB\_SPECIFIC\_APPS trac q variable open redirect (web\_specific\_apps.rules) - 2008652 - ET WEB\_SPECIFIC\_APPS ScriptsEz Easy Image Downloader id File Disclosure (web\_specific\_apps.rules) - 2008826 - ET WEB\_SPECIFIC\_APPS Way Of The Warrior crea.php plancia Remote File Inclusion (web\_specific\_apps.rules) - 2008865 - ET WEB\_SPECIFIC\_APPS PozScripts Business Directory Script cid parameter SQL Injection (web\_specific\_apps.rules) - 2008871 - ET WEB\_SPECIFIC\_APPS phpFan init.php Remote File Inclusion (web\_specific\_apps.rules) - 2008872 - ET WEB\_SPECIFIC\_APPS Ultrastats serverid parameter SQL Injection (web\_specific\_apps.rules) - 2008874 - ET WEB\_SPECIFIC\_APPS PHPStore Yahoo Answers id parameter SQL Injection (web\_specific\_apps.rules) - 2008879 - ET WEB\_SPECIFIC\_APPS Free Directory Script 1.1.1 API\_HOME\_DIR parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008899 - ET WEB\_SPECIFIC\_APPS Pie RSS module lib parameter remote file inclusion (web\_specific\_apps.rules) - 2008900 - ET WEB\_SPECIFIC\_APPS ModernBill export\_batch.inc.php DIR Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008901 - ET WEB\_SPECIFIC\_APPS ModernBill run\_auto\_suspend.cron.php DIR Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008902 - ET WEB\_SPECIFIC\_APPS ModernBill send\_email\_cache.php DIR Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008903 - ET WEB\_SPECIFIC\_APPS ModernBill 2checkout\_return.inc.php DIR Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008904 - ET WEB\_SPECIFIC\_APPS ModernBill nettools.popup.php DIR Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008922 - ET WEB\_SPECIFIC\_APPS Nitrotech common.php root Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008934 - ET WEB\_SPECIFIC\_APPS Turnkey Arcade Script id parameter SQL injection (web\_specific\_apps.rules) - 2008935 - ET WEB\_SPECIFIC\_APPS Werner Hilversum FAQ Manager header.php config\_path parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008962 - ET WEB\_SPECIFIC\_APPS PHPmyGallery confdir parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008964 - ET WEB\_SPECIFIC\_APPS lcxBBportal Alpha portal\_block.php phpbb\_root\_path parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008965 - ET WEB\_SPECIFIC\_APPS lcxBBportal Alpha acp\_lcxbbportal.php phpbb\_root\_path parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008966 - ET WEB\_SPECIFIC\_APPS ccTiddly index.php cct\_base parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008967 - ET WEB\_SPECIFIC\_APPS ccTiddly proxy.php cct\_base parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008968 - ET WEB\_SPECIFIC\_APPS ccTiddly header.php cct\_base parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008969 - ET WEB\_SPECIFIC\_APPS ccTiddly include.php cct\_base parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008970 - ET WEB\_SPECIFIC\_APPS ccTiddly workspace.php cct\_base parameter Remote File Inclusion (web\_specific\_apps.rules) - 2008996 - ET WEB\_SPECIFIC\_APPS Simple Text-File Login script slogin\_path parameter remote file inclusion (web\_specific\_apps.rules) - 2009018 - ET WEB\_SPECIFIC\_APPS Text Lines Rearrange Script filename parameter File Disclosure (web\_specific\_apps.rules) - 2009053 - ET WEB\_SPECIFIC\_APPS MODx CMS Thumbnail.php base\_path Remote File Inclusion (web\_specific\_apps.rules) - 2009059 - ET WEB\_SPECIFIC\_APPS Recly Feederator add\_tmsp.php mosConfig\_absolute\_path parameter remote file inclusion (web\_specific\_apps.rules) - 2009060 - ET WEB\_SPECIFIC\_APPS Recly Feederator edit\_tmsp.php mosConfig\_absolute\_path parameter remote file inclusion (web\_specific\_apps.rules) - 2009061 - ET WEB\_SPECIFIC\_APPS Recly Feederator subscription.php GLOBALS mosConfig\_absolute\_path parameter remote file inclusion (web\_specific\_apps.rules) - 2009062 - ET WEB\_SPECIFIC\_APPS Recly Feederator tmsp.php mosConfig\_absolute\_path parameter remote file inclusion (web\_specific\_apps.rules) - 2009086 - ET WEB\_SPECIFIC\_APPS playSMS init.php apps\_path themes parameter remote file inclusion (web\_specific\_apps.rules) - 2009088 - ET WEB\_SPECIFIC\_APPS playSMS function.php apps\_path libs parameter remote file inclusion (web\_specific\_apps.rules) - 2009101 - ET WEB\_SPECIFIC\_APPS REALTOR define.php Remote File Inclusion (web\_specific\_apps.rules) - 2009123 - ET WEB\_SPECIFIC\_APPS SezHoo SezHooTabsAndActions.php IP Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009132 - ET WEB\_CLIENT Internet Explorer javascript onUnload http spliting attempt (body) (web\_client.rules) - 2009133 - ET WEB\_CLIENT Internet Explorer javascript onUnload http spliting attempt (img) (web\_client.rules) - 2009134 - ET WEB\_CLIENT Internet Explorer javascript onURLFlip http spliting attempt (body) (web\_client.rules) - 2009135 - ET WEB\_CLIENT Internet Explorer javascript onURLFlip http spliting attempt (web\_client.rules) - 2009141 - ET WEB\_SPECIFIC\_APPS MiNBank utdb\_access.php minsoft\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009142 - ET WEB\_SPECIFIC\_APPS MiNBank utgn\_message.php minsoft\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009163 - ET WEB\_SPECIFIC\_APPS GBook header.php abspath Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009164 - ET WEB\_SPECIFIC\_APPS openEngine filepool.php oe\_classpath parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009165 - ET WEB\_SPECIFIC\_APPS Barcode Generator LSTable.php class\_dir parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009166 - ET WEB\_SPECIFIC\_APPS Concord Consortium CoAST header.php sections\_file parameter remote file inclusion (web\_specific\_apps.rules) - 2009167 - ET WEB\_SPECIFIC\_APPS AdaptCMS Lite rss\_importer\_functions.php sitepath Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009179 - ET WEB\_SPECIFIC\_APPS SnippetMaster vars.inc.php \_SESSION Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009180 - ET WEB\_SPECIFIC\_APPS SnippetMaster pcltar.lib.php g\_pcltar\_lib\_dir Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009188 - ET WEB\_SPECIFIC\_APPS gapicms toolbar.php dirDepth Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009190 - ET WEB\_SPECIFIC\_APPS YACS update\_trailer.php context Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009196 - ET WEB\_SPECIFIC\_APPS Basebuilder main.inc.php mj\_config Parameter Remote File inclusion (web\_specific\_apps.rules) - 2009225 - ET WEB\_SPECIFIC\_APPS ea-gBook index\_inc.php inc\_ordner parameter remote file inclusion (web\_specific\_apps.rules) - 2009307 - ET WEB\_SPECIFIC\_APPS WeBid cron.php include\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009309 - ET WEB\_SPECIFIC\_APPS WeBid ST\_browsers.php include\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009311 - ET WEB\_SPECIFIC\_APPS WeBid ST\_countries.php include\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009313 - ET WEB\_SPECIFIC\_APPS WeBid ST\_platforms.php include\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009321 - ET WEB\_SPECIFIC\_APPS rgboard footer.php \_path parameter remote file inclusion (web\_specific\_apps.rules) - 2009333 - ET WEB\_SPECIFIC\_APPS ODARS resource\_categories\_view.php CLASSES\_ROOT parameter Remote file inclusion (web\_specific\_apps.rules) - 2009364 - ET WEB\_SPECIFIC\_APPS Beerwins PHPLinkAdmin linkadmin.php page Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009367 - ET WEB\_SPECIFIC\_APPS cmsWorks lib.module.php mod\_root Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009370 - ET WEB\_SPECIFIC\_APPS Boonex Dolphin HTMLSax3.php Remote File Inclusion (web\_specific\_apps.rules) - 2009371 - ET WEB\_SPECIFIC\_APPS Boonex Dolphin safehtml.php Remote File Inclusion (web\_specific\_apps.rules) - 2009372 - ET WEB\_SPECIFIC\_APPS Boonex Dolphin content.inc.php Remote File Inclusion (web\_specific\_apps.rules) - 2009378 - ET WEB\_SPECIFIC\_APPS Acute Control Panel container.php theme\_directory parameter remote file inclusion (web\_specific\_apps.rules) - 2009379 - ET WEB\_SPECIFIC\_APPS Acute Control Panel header.php theme\_directory parameter remote file inclusion (web\_specific\_apps.rules) - 2009381 - ET WEB\_SPECIFIC\_APPS Interact embedforum.php Remote File Inclusion (web\_specific\_apps.rules) - 2009382 - ET WEB\_SPECIFIC\_APPS Agares Media ThemeSiteScript frontpage\_right.php Remote File Inclusion (web\_specific\_apps.rules) - 2009386 - ET WEB\_SPECIFIC\_APPS Interact lib.inc.php Remote File Inclusion (web\_specific\_apps.rules) - 2009397 - ET WEB\_SPECIFIC\_APPS phpProfiles body\_comm.inc.php content parameter remote file inclusion (web\_specific\_apps.rules) - 2009398 - ET WEB\_SPECIFIC\_APPS HoMaP plugin\_admin.php \_settings Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009415 - ET WEB\_SPECIFIC\_APPS PhpBlock basicfogfactory.class.php PATH\_TO\_CODE Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009416 - ET WEB\_SPECIFIC\_APPS txtSQL startup.php CFG Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009427 - ET WEB\_SPECIFIC\_APPS Grape Web Statistics functions.php location Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009435 - ET WEB\_SPECIFIC\_APPS e107 123 FlashChat Module 123flashchat.php e107path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009459 - ET WEB\_SPECIFIC\_APPS Orlando CMS classes init.php GLOBALS Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009460 - ET WEB\_SPECIFIC\_APPS Orlando CMS newscat.php GLOBALS Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009466 - ET WEB\_SPECIFIC\_APPS Recly Competitions Component add.php GLOBALS Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009467 - ET WEB\_SPECIFIC\_APPS Recly Competitions Component competitions.php GLOBALS Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009468 - ET WEB\_SPECIFIC\_APPS Recly Competitions Component settings.php mosConfig\_absolute\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009502 - ET WEB\_SPECIFIC\_APPS Quantum Game Library server\_request.php CONFIG Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009504 - ET WEB\_SPECIFIC\_APPS Quantum Game Library smarty.inc.php CONFIG Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009506 - ET WEB\_SPECIFIC\_APPS Falcon Series One sitemap.xml.php dir Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009587 - ET WEB\_SPECIFIC\_APPS Virtualmin left.cgi XSS attempt (web\_specific\_apps.rules) - 2009588 - ET WEB\_SPECIFIC\_APPS Virtualmin link.cgi XSS attempt (web\_specific\_apps.rules) - 2009589 - ET WEB\_SPECIFIC\_APPS Virtualmin Anonymous Proxy attempt (web\_specific\_apps.rules) - 2009590 - ET WEB\_SPECIFIC\_APPS Citrix XenCenterWeb edituser.php XSS attempt (web\_specific\_apps.rules) - 2009591 - ET WEB\_SPECIFIC\_APPS Citrix XenCenterWeb console.php XSS attempt (web\_specific\_apps.rules) - 2009592 - ET WEB\_SPECIFIC\_APPS Citrix XenCenterWeb forcesd.php XSS attempt (web\_specific\_apps.rules) - 2009593 - ET WEB\_SPECIFIC\_APPS Citrix XenCenterWeb forcerestart.php XSS attempt (web\_specific\_apps.rules) - 2009594 - ET WEB\_SPECIFIC\_APPS Citrix XenCenterWeb changepw.php CSRF attempt (web\_specific\_apps.rules) - 2009595 - ET WEB\_SPECIFIC\_APPS Citrix XenCenterWeb hardstopvm.php CSRF attempt (web\_specific\_apps.rules) - 2009596 - ET WEB\_SPECIFIC\_APPS Citrix XenCenterWeb writeconfig.php Remote Command Execution attempt (web\_specific\_apps.rules) - 2009653 - ET WEB\_SPECIFIC\_APPS SMA-DB format.php \_page\_css Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009654 - ET WEB\_SPECIFIC\_APPS SMA-DB format.php \_page\_javascript Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009656 - ET WEB\_SPECIFIC\_APPS SMA-DB format.php \_page\_content Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009663 - ET WEB\_SPECIFIC\_APPS TotalCalendar config.php inc\_dir Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009693 - ET WEB\_SPECIFIC\_APPS Zen Cart Remote Code Execution (web\_specific\_apps.rules) - 2009709 - ET WEB\_SPECIFIC\_APPS phpMyAdmin Setup Code Injection (phpinfo) (web\_specific\_apps.rules) - 2009710 - ET WEB\_SPECIFIC\_APPS phpMyAdmin Setup Code Injection (system) (web\_specific\_apps.rules) - 2009717 - ET WEB\_SPECIFIC\_APPS 1024 CMS standard.php page\_include Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009723 - ET WEB\_SPECIFIC\_APPS QuickTeam qte\_web.php qte\_web\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009733 - ET WEB\_SPECIFIC\_APPS Golabi index\_logged.php cur\_module Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009737 - ET WEB\_SPECIFIC\_APPS ProjectCMS admin\_theme\_remove.php file Parameter Remote Directory Delete (web\_specific\_apps.rules) - 2009754 - ET WEB\_SPECIFIC\_APPS Clickheat install.clickheat.php mosConfig\_absolute\_path Remote File Inclusion (web\_specific\_apps.rules) - 2009755 - ET WEB\_SPECIFIC\_APPS Clickheat \_main.php mosConfig\_absolute\_path Parameter Remote File Inclusion - 1 (web\_specific\_apps.rules) - 2009756 - ET WEB\_SPECIFIC\_APPS Clickheat main.php mosConfig\_absolute\_path Parameter Remote File Inclusion - 2 (web\_specific\_apps.rules) - 2009757 - ET WEB\_SPECIFIC\_APPS Clickheat Cache.php mosConfig\_absolute\_path Remote File Inclusion (web\_specific\_apps.rules) - 2009758 - ET WEB\_SPECIFIC\_APPS Clickheat Clickheat\_Heatmap.php mosConfig\_absolute\_path Remote File Inclusion (web\_specific\_apps.rules) - 2009759 - ET WEB\_SPECIFIC\_APPS Clickheat GlobalVariables.php mosConfig\_absolute\_path Remote File Inclusion - 1 (web\_specific\_apps.rules) - 2009760 - ET WEB\_SPECIFIC\_APPS Clickheat main.php mosConfig\_absolute\_path Parameter Remote File Inclusion -2 (web\_specific\_apps.rules) - 2009788 - ET WEB\_SPECIFIC\_APPS RSS-aggregator display.php path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009793 - ET WEB\_SPECIFIC\_APPS PHP Crawler footer.php footer\_file Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009846 - ET WEB\_SPECIFIC\_APPS WB News global.php config Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009848 - ET WEB\_SPECIFIC\_APPS Dragoon header.inc.php root Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009871 - ET WEB\_SPECIFIC\_APPS PHPauction GPL converter.inc.php include\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009872 - ET WEB\_SPECIFIC\_APPS PHPauction GPL messages.inc.php include\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009873 - ET WEB\_SPECIFIC\_APPS PHPauction GPL settings.inc.php include\_path Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009874 - ET WEB\_SPECIFIC\_APPS cpCommerce \_functions.php GLOBALS Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009877 - ET WEB\_SPECIFIC\_APPS VirtueMart Google Base Component admin.googlebase.php Remote File Inclusion (web\_specific\_apps.rules) - 2009898 - ET WEB\_SPECIFIC\_APPS Pragyan CMS form.lib.php sourceFolder Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009903 - ET WEB\_SPECIFIC\_APPS AdaptBB latestposts.php forumspath Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009925 - ET WEB\_SPECIFIC\_APPS x10 Automatic MP3 Script function\_core.php web\_root Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009927 - ET WEB\_SPECIFIC\_APPS x10 Automatic MP3 Script layout\_lyrics.php web\_root Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2009976 - ET EXPLOIT Siemens Gigaset SE361 WLAN Data Flood Denial of Service Vulnerability (exploit.rules) - 2009977 - ET WEB\_SPECIFIC\_APPS CMScontrol 7.x (index.php id\_menu) SQL Injection Vulnerability (web\_specific\_apps.rules) - 2009979 - ET WEB\_SPECIFIC\_APPS CMScontrol 7.x (index.php id\_menu) SQL Injection Vulnerability (web\_specific\_apps.rules) - 2009999 - ET EXPLOIT xp\_servicecontrol access (exploit.rules) - 2010000 - ET EXPLOIT xp\_fileexist access (exploit.rules) - 2010009 - ET WEB\_SPECIFIC\_APPS Webmin Pre-1.290 Compromise Attempt (web\_specific\_apps.rules) - 2010027 - ET WEB\_SPECIFIC\_APPS DM Albums album.php SECURITY\_FILE Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2010092 - ET WEB\_SPECIFIC\_APPS Webradev Download Protect EmailTemplates.class.php Remote File Inclusion (web\_specific\_apps.rules) - 2010093 - ET WEB\_SPECIFIC\_APPS Webradev Download Protect PDPEmailReplaceConstants.class.php Remote File Inclusion (web\_specific\_apps.rules) - 2010094 - ET WEB\_SPECIFIC\_APPS Webradev Download Protect ResellersManager.class.php Remote File Inclusion (web\_specific\_apps.rules) - 2010095 - ET WEB\_SPECIFIC\_APPS PHPGenealogy CoupleDB.php DataDirectory Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2010096 - ET WEB\_SPECIFIC\_APPS GROUP-E head\_auth.php CFG Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2010099 - ET WEB\_SPECIFIC\_APPS News Manager ch\_readalso.php read\_xml\_include Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2010126 - ET WEB\_SPECIFIC\_APPS Ultrize TimeSheet timesheet.php include\_dir Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2010191 - ET WEB\_SPECIFIC\_APPS justVisual contact.php fs\_jVroot Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2010192 - ET WEB\_SPECIFIC\_APPS justVisual pageTemplate.php fs\_jVroot Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2010193 - ET WEB\_SPECIFIC\_APPS justVisual utilities.php fs\_jVroot Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2010252 - ET WEB\_SPECIFIC\_APPS Datalife Engine api.class.php dle\_config\_api Parameter Remote File Inclusion (web\_specific\_apps.rules) - 2010341 - ET WEB\_SPECIFIC\_APPS OS Commerce 2.2 RC2 Potential Anonymous Remote Code Execution (web\_specific\_apps.rules) - 2010359 - ET WEB\_SPECIFIC\_APPS FSphp FSphp.php FSPHP\_LIB Parameter Remote File Inclusion Attempt (web\_specific\_apps.rules) - 2010360 - ET WEB\_SPECIFIC\_APPS FSphp navigation.php FSPHP\_LIB Parameter Remote File Inclusion Attempt (web\_specific\_apps.rules) - 2010361 - ET WEB\_SPECIFIC\_APPS FSphp pathwirte.php FSPHP\_LIB Parameter Remote File Inclusion Attempt (web\_specific\_apps.rules) - 2010841 - ET WEB\_CLIENT DX Studio Player Firefox Plug-in Command Injection Attempt (web\_client.rules) - 2010890 - ET WEB\_SPECIFIC\_APPS phpBB3 registration (Step1 GET) (web\_specific\_apps.rules) - 2010891 - ET WEB\_SPECIFIC\_APPS phpBB3 registration (Step2 POST) (web\_specific\_apps.rules) - 2010892 - ET WEB\_SPECIFIC\_APPS phpBB3 registration (Step3 GET) (web\_specific\_apps.rules) - 2010893 - ET WEB\_SPECIFIC\_APPS phpBB3 registration (Step4 POST) (web\_specific\_apps.rules) - 2010894 - ET WEB\_SPECIFIC\_APPS phpBB3 Brute-Force reg attempt (Bad pf\_XXXXX) (web\_specific\_apps.rules) - 2010895 - ET WEB\_SPECIFIC\_APPS phpBB3 Brute-Force reg attempt (Bad pf\_XXXXX) (web\_specific\_apps.rules) - 2010896 - ET WEB\_SPECIFIC\_APPS phpBB3 Brute-Force reg attempt (Bad flow 2) (web\_specific\_apps.rules) - 2010897 - ET WEB\_SPECIFIC\_APPS phpBB3 Brute-Force reg attempt (Bad flow 2) (web\_specific\_apps.rules) - 2010898 - ET WEB\_SPECIFIC\_APPS phpBB3 registration (Bogus Stage3 GET) (web\_specific\_apps.rules) - 2010899 - ET WEB\_SPECIFIC\_APPS phpBB3 multiple login attempts (web\_specific\_apps.rules) - 2010900 - ET WEB\_SPECIFIC\_APPS phpBB3 possible spammer posting attempts (web\_specific\_apps.rules) - 2011223 - ET WEB\_CLIENT Malvertising drive by kit encountered - Loading… (web\_client.rules) - 2011240 - ET WEB\_CLIENT Mozilla Firefox Window.Open Document URI Spoofing Attempt (web\_client.rules) - 2011241 - ET EXPLOIT M3U File Request Flowbit Set (exploit.rules) - 2011355 - ET WEB\_CLIENT Driveby bredolab hidden div served by nginx (web\_client.rules) - 2011503 - ET EXPLOIT Successful Etrust Secure Transaction Platform Identification and Entitlements Server File Disclosure Attempt (exploit.rules) - 2011506 - ET WEB\_CLIENT PDF With eval Function - Possibly Hostile (web\_client.rules) - 2011530 - ET WEB\_CLIENT PDF Name Representation Obfuscation of EmbeddedFile (web\_client.rules) - 2011531 - ET WEB\_CLIENT PDF Name Representation Obfuscation of Type (web\_client.rules) - 2011532 - ET WEB\_CLIENT PDF Name Representation Obfuscation of Javascript (web\_client.rules) - 2011533 - ET WEB\_CLIENT PDF Name Representation Obfuscation of URL (web\_client.rules) - 2011535 - ET WEB\_CLIENT PDF Name Representation Obfuscation of JS (web\_client.rules) - 2011537 - ET WEB\_CLIENT PDF Name Representation Obfuscation of OpenAction (web\_client.rules) - 2011555 - ET WEB\_SPECIFIC\_APPS SnortReport nmap.php target Parameter Arbitrary Command Execution Attempt (web\_specific\_apps.rules) - 2011583 - ET EXPLOIT Neosploit Exploit Pack Activity Observed (exploit.rules) - 2011797 - ET EXPLOIT Driveby Bredolab - client exploited by acrobat (exploit.rules) - 2011875 - ET WEB\_SPECIFIC\_APPS DBHcms editmenu Parameter SELECT FROM SQL Injection Attempt (web\_specific\_apps.rules) - 2011881 - ET WEB\_SPECIFIC\_APPS Open Web Analytics mw\_plugin.php IP Parameter Remote File inclusion Attempt (web\_specific\_apps.rules) - 2011972 - ET EXPLOIT PDF served from /tmp/ could be Phoenix Exploit Kit (exploit.rules) - 2011973 - ET EXPLOIT JAR served from /tmp/ could be Phoenix Exploit Kit (exploit.rules) - 2011978 - ET WEB\_CLIENT MALVERTISING Alureon JavaScript IFRAME Redirect (web\_client.rules) - 2012045 - ET EXPLOIT VMware Tools Update OS Command Injection Attempt (exploit.rules) - 2012055 - ET EXPLOIT JDownloader Webinterface Source Code Disclosure (exploit.rules) - 2012056 - ET WEB\_CLIENT Flash Player Flash6.ocx AllowScriptAccess Denial of Service (web\_client.rules) - 2012063 - ET EXPLOIT Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference (CVE-2009-3103) (exploit.rules) - 2012101 - ET EXPLOIT Oracle Virtual Server Agent Command Injection Attempt (exploit.rules) - 2012103 - ET EXPLOIT D-Link bsc\_wlan.php Security Bypass (exploit.rules) - 2800006 - ETPRO EXPLOIT CVS Argumentx Command Double Free Vulnerability (exploit.rules) - 2800029 - ETPRO EXPLOIT Multiple Vendor Malformed ZIP Archive Antivirus Detection Bypass (exploit.rules) - 2800052 - ETPRO WEB\_CLIENT Mozilla Firefox IFRAME Cross Site Scripting (web\_client.rules) - 2800057 - ETPRO EXPLOIT Squid Double Content-Length HTTP Header Cache Poisoning (exploit.rules) - 2800061 - ETPRO EXPLOIT Veritas Backup Exec Server Remote Registry Access (exploit.rules) - 2800108 - ETPRO WEB\_CLIENT Microsoft Excel Workspace xls download (web\_client.rules) - 2800146 - ETPRO WEB\_CLIENT Microsoft Visual Basic 6.0 VBP Project File request (vbp) (web\_client.rules) - 2800166 - ETPRO EXPLOIT CA BrightStor ARCServe Backup LGServer Authentication Username Overflow (exploit.rules) - 2800167 - ETPRO EXPLOIT CA BrightStor ARCServe Backup LGServer Arbitrary File Upload (exploit.rules) - 2800182 - ETPRO EXPLOIT CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure 1 (exploit.rules) - 2800183 - ETPRO EXPLOIT CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure 2 (exploit.rules) - 2800196 - ETPRO WEB\_CLIENT Apple QuickTime mov Download (web\_client.rules) - 2800197 - ETPRO WEB\_CLIENT Apple QuickTime moov Download (web\_client.rules) - 2800199 - ETPRO WEB\_CLIENT Apple QuickTime pic Download Request (web\_client.rules) - 2800200 - ETPRO WEB\_CLIENT Apple QuickTime pct Download Request (web\_client.rules) - 2800207 - ETPRO WEB\_CLIENT Apple QuickTime qt Download (web\_client.rules) - 2800235 - ETPRO WEB\_CLIENT Skype skype4com URI Handler Remote Heap Corruption (web\_client.rules) - 2800269 - ETPRO EXPLOIT Microsoft Windows Kernel ICMP Fragmented Packet Processing Denial of Service (exploit.rules) - 2800302 - ETPRO WEB\_CLIENT Sun Java Web Start Request (web\_client.rules) - 2800311 - ETPRO EXPLOIT Informix Server Argument Processing Overflow Attempt (exploit.rules) - 2800365 - ETPRO EXPLOIT VMware Server ISAPI Extension Remote Denial Of Service (exploit.rules) - 2800380 - ETPRO EXPLOIT Sun Solstice AdminSuite sadmind service adm\_build\_path Set (exploit.rules) - 2800410 - ETPRO WEB\_SPECIFIC\_APPS Oracle Application Server BPEL Module Cross Site Scripting (web\_specific\_apps.rules) - 2800416 - ETPRO WEB\_CLIENT FFmpeg 4xm Request (web\_client.rules) - 2800419 - ETPRO EXPLOIT Oracle Application Server Portal Cross Site Scripting (exploit.rules) - 2800422 - ETPRO EXPLOIT Squid HTTP Version Number Parsing Denial of Service (exploit.rules) - 2800433 - ETPRO EXPLOIT IBM Tivoli Storage Manager Express Backup Heap Corruption 1 (exploit.rules) - 2800434 - ETPRO EXPLOIT IBM Tivoli Storage Manager Express Backup Heap Corruption 2 (exploit.rules) - 2800435 - ETPRO EXPLOIT IBM Tivoli Storage Manager Express Backup Heap Corruption 3 (exploit.rules) - 2800436 - ETPRO EXPLOIT IBM Tivoli Storage Manager Express Backup Heap Corruption 4 (exploit.rules) - 2800437 - ETPRO EXPLOIT IBM Director CIM Server Consumer Name Handling Denial of Service 1 (exploit.rules) - 2800438 - ETPRO EXPLOIT IBM Director CIM Server Consumer Name Handling Denial of Service 2 (exploit.rules) - 2800529 - ETPRO EXPLOIT HP Operations Manager Server Unauthorized File Upload (exploit.rules) - 2800548 - ETPRO EXPLOIT MIT Kerberos KDC Authentication Denial of Service (exploit.rules) - 2800549 - ETPRO EXPLOIT MIT Kerberos KDC Authentication Denial of Service (exploit.rules) - 2800638 - ETPRO EXPLOIT Cisco IOS Show Memory URI Connection (exploit.rules) - 2800639 - ETPRO EXPLOIT Cisco IOS HTTP Service HTML Injection Vulnerability (Published Exploit) (exploit.rules) - 2800652 - ETPRO EXPLOIT CA ARCserve Backup Discovery Service Denial of Service 1 (exploit.rules) - 2800653 - ETPRO EXPLOIT CA ARCserve Backup Discovery Service Denial of Service 2 (exploit.rules) - 2800685 - ETPRO EXPLOIT Sun Directory Server LDAP Denial of Service (exploit.rules) - 2800707 - ETPRO EXPLOIT Oracle Database Server Login Access Control Bypass (exploit.rules) - 2800718 - ETPRO EXPLOIT CA BrightStor ARCserve Backup Media Server SUN RPC Denial of Service (exploit.rules) - 2800720 - ETPRO EXPLOIT IBM Lotus Domino LDAP Server Memory Exception Vulnerability via ASN.1 (exploit.rules) - 2800739 - ETPRO WEB\_CLIENT Microsoft Internet Explorer 7 Navigation Canceled Page Cross-Site Scripting (web\_client.rules) - 2800785 - ETPRO EXPLOIT VNC Session Started (exploit.rules) - 2800807 - ETPRO EXPLOIT IBM Lotus Notes Cross Site Scripting (Published Exploit) (exploit.rules) - 2800842 - ETPRO EXPLOIT IBM Rational Quality Manager and Test Lab Manager Policy Bypass (exploit.rules) - 2800843 - ETPRO WEB\_CLIENT RealNetworks RealPlayer CDDA Access (web\_client.rules) - 2800844 - ETPRO WEB\_CLIENT RealNetworks RealPlayer CDDA Access 2 (web\_client.rules) - 2800859 - ETPRO EXPLOIT HP Data Protector Media Operations Null Pointer Deference Denial of Service Request (exploit.rules) - 2800868 - ETPRO EXPLOIT Powerpoint Download (exploit.rules) - 2800942 - ETPRO EXPLOIT Microsoft Forefront Unified Access Gateway Signurl.asp Cross-Site Scripting (exploit.rules) - 2800967 - ETPRO WEB\_CLIENT Microsoft Office Insecure Library Loading WebDAV GET pptimpconv.dll (web\_client.rules) - 2800968 - ETPRO WEB\_CLIENT Microsoft Office Powerpoint Insecure Library Loading WebDAV PROPFIND pp7x32.dll (web\_client.rules) - 2800970 - ETPRO WEB\_CLIENT Microsoft Office Powerpoint Insecure Library Loading WebDAV PROPFIND xlimpconv.dll (web\_client.rules) - 2800971 - ETPRO WEB\_CLIENT Microsoft Office Powerpoint Insecure Library Loading WebDAV GET xlimpconv.dll (web\_client.rules) - 2800972 - ETPRO WEB\_CLIENT Potential Internet\_Explorer IE6 animation behavior Vulnerability (web\_client.rules) - 2800973 - ETPRO WEB\_CLIENT Microsoft Sharepoint service remote code execution convertTo (web\_client.rules) - 2800974 - ETPRO WEB\_CLIENT Microsoft Sharepoint service remote code execution - convertFrom (web\_client.rules)