EmergingThreats
>
Main Web
>
2009708
(2009-10-06,
TWikiGuest
)
E
dit
A
ttach
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB_SPECIFIC Possible XOOPS User.php Cross Site Scripting Attack"; flow:to_server,established; uricontent:"/modules/profile/user.php"; nocase; uricontent:"