PHP jui_filter_rules Parsing Library Code Execution Vulnerability
Publish Date: 10 août 2016
Gravité: : Medium
Description
PHP jui_filter_rule parsing library is prone to a remote code execution vulnerability. The vulnerability exists because of the provided PHP parsing library allows to specify a PHP function to convert the supplied filter value on the server side. This leads ultimately to code execution through attacker supplied input.
Information Exposure Rating:
Apply associated Trend Micro DPI Rules.
Solutions
Trend Micro Deep Security DPI Rule Number: 1007252