""ET WEB_SPECIFIC_APPS JBoss JMX Console Beanshell Deployer .WAR File Upload and Deployment Cross Site Request Forgery Attempt""

SID: 2011697

Revision: 2

Class Type: web-application-attack

Metadata: created_at 2010_07_30, cve CVE_2010_0738, updated_at 2024_01_03

Reference:

  • cve

  • 2010-0738

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: $HTTP_PORTS

Destination Network: $HOME_NET

Destination Port: any

Flow: established,to_client

Contents:

  • Value: "/HtmlAdaptor"

  • Value: "action=invokeOpByName"

  • Value: "DeploymentFileRepository"

  • Value: "methodName="

  • Value: ".war"

  • Value: ".jsp"

Within: 25

PCRE:

Special Options:

  • nocase

  • nocase

  • nocase

  • nocase

  • nocase

  • nocase

source