CVE-2011-5021

PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:phpids:phpids:0.6.4:*:*:*:*:*:*:*
cpe:2.3:a:phpids:phpids:*:*:*:*:*:*:*:*

Information

Published : 2011-12-29 04:15

Updated : 2011-12-29 05:00


NVD link : CVE-2011-5021

Mitre link : CVE-2011-5021


JSON object : View

Products Affected

phpids

  • phpids
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')