NetSight
high7.5

CVE-2011-5021

PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PH…

Impact

PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.

Affected products

VendorProductAffected versions
PhpidsPhpids
through 0.6.5
Version 0.6.4

Weakness classification

References