""ET WEB_SERVER Possible HTTP 405 XSS Attempt (Local Source)""

SID: 2010519

Revision: 8

Class Type: web-application-attack

Metadata: created_at 2010_07_30, updated_at 2019_09_27

Reference:

Protocol: tcp

Source Network: $HTTP_SERVERS

Source Port: $HTTP_PORTS

Destination Network: $EXTERNAL_NET

Destination Port: 1024:

Flow: from_server,established

Contents:

  • Value: "405"

  • Value: "Method Not Allowed"

  • Value: "<script" Depth: 280

Within:

PCRE:

Special Options:

  • http_stat_code

  • nocase

  • file_data

  • nocase

source