CVE-2011-5021 PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vec...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpids | <= 0.6.5 | No fix listed |
| phpids | = 0.6.4 | No fix listed |
References
- sitewat.ch url-repurposed