""ET POLICY Cleartext WordPress Login""

SID: 2012843

Revision: 2

Class Type: policy-violation

Metadata: affected_product Wordpress, affected_product Wordpress_Plugins, attack_target Web_Server, created_at 2011_05_25, deployment Datacenter, signature_severity Informational, tag Wordpress, updated_at 2011_05_25

Reference:

Protocol: tcp

Source Network: any

Source Port: any

Destination Network: any

Destination Port: $HTTP_PORTS

Flow: established,to_server

Contents:

  • Value: "log="

  • Value: "&pwd="

  • Value: "&wp-submit="

Within:

PCRE:

Special Options:

  • http_client_body

  • http_client_body

  • http_client_body

source