HTTP POST contains malicious script

http-post-script (8539) The risk level is classified as MediumMedium Risk

Description:

A remote attacker may be attempting to execute arbitrary code on the Web server by sending a specially-crafted POST command containing malicious script. The script could be written in Java or some other scripting language.


Consequences:

Gain Privileges

Remedy:

Ensure that your personal firewall, operating system, and programs are up-to-date in order to minimize the threat of a system compromise.

References:

Platforms Affected:

  • IETF HTTP/1.1
  • Various vendors Any application

Reported:

Not available

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

For corrections or additions please email xforce@iss.net

Return to the main page