RCE in Phpids

CVE-2011-5021

PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.015 (71.0th percentile) — read the EPSS interpretation.

Affected products

  • Phpids — versions 0.6.4
  • N/a — versions n/a

Weakness classification (CWE)

References