""ET WEB_SPECIFIC_APPS Barracuda Web Application Firewall 600 XSS attempt (backup_username)""

SID: 2010547

Revision: 4

Class Type: web-application-attack

Metadata: created_at 2010_07_30, updated_at 2010_10_17

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HOME_NET

Destination Port: $HTTP_PORTS

Flow: established,to_server

Contents:

  • Value: "/cgi-mod/index.cgi?"

  • Value: "backup_username="

Within:

PCRE: "/\/cgi-mod\/index.cgi\?.*backup_username=[^&\

Special Options:

  • nocase

  • http_uri

  • nocase

  • http_uri

  • ]*[>\"]/iU"

source