Intrusion PreventionPHP.Malicious.Shell
Description
This indicates an attempt to use a malicious PHP page.
Most malicious PHP script is used to execute command within the privileges of the web applications. And some will be used to launch attack or send spam emails.
Affected Products
Any compromised PHP server
Impact
System Compromise: Remote attacker can gain control of vulnerable systems.
Recommended Actions
Remove malicious php file from the system.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2025-02-27 | 31.962 |
Modified
|
Sig Added |
| 2025-01-22 | 29.941 |
Modified
|
Sig Added |
| 2025-01-09 | 29.934 |
Modified
|
Sig Added |
| 2024-12-04 | 29.915 |
Modified
|
Sig Added |
| 2024-01-02 | 26.706 |
Modified
|
Sig Added |
| 2023-01-30 | 22.485 |
Modified
|
Sig Added |
| 2021-10-06 | 18.171 |
Modified
|
Sig Added |
| 2021-09-28 | 18.166 |
Modified
|
Sig Added |
| 2021-06-17 | 18.100 |
Modified
|
Sig Added |
| 2020-07-16 | 15.888 |
Modified
|
Sig Added |
| ID | 44580 |
| Created | Oct 06, 2017 |
| Updated | Apr 14, 2025 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | PHP_app |
| Profile Type | Malware |