CVE-2011-5021

PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2011-12-29

Last modified

2024-09-16

Weaknesses

CWE-94

Affected products

• Phpids (Phpids)

References

• https://sitewat.ch/Advisory/View/7