![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Changeset 3730571
- Timestamp:
- 10/06/2026 10:50:44 AM (3 weeks ago)
- Location:
- ninjafirewall
- Files:
-
- 9 edited
-
trunk/lib/class-firewall-log.php (modified) (2 diffs)
-
trunk/lib/helpers.php (modified) (3 diffs)
-
trunk/lib/settings_dashboard_statistics.php (modified) (2 diffs)
-
trunk/lib/settings_login_protection.php (modified) (5 diffs)
-
trunk/lib/widget.php (modified) (1 diff)
-
trunk/ninjafirewall.php (modified) (2 diffs)
-
trunk/readme.txt (modified) (2 diffs)
-
updates/rules4.txt (modified) (1 diff)
-
updates/version3.txt (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
-
ninjafirewall/trunk/lib/class-firewall-log.php
r3635078 r3730571 80 80 * Update stats. 81 81 */ 82 if ( is_file( $stat_file ) ) { 83 $stats = file_get_contents( $stat_file, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES ); 84 $stats = str_replace('<?php exit; ?>', '', $stats ); 85 } else { 86 $stats = '0:0:0:0:0:0:0:0:0:0'; 82 $lock = fopen("$log/stats.lock", 'c'); 83 if ( $lock ) { 84 if ( flock( $lock, LOCK_EX ) ) { 85 $stat_arr = self::read_stats( $stat_file ); 86 $stat_arr[ $loglevel ]++; 87 @ file_put_contents( 88 $stat_file, 89 "<?php exit; ?>{$stat_arr[0]}:{$stat_arr[1]}:{$stat_arr[2]}:{$stat_arr[3]}:{$stat_arr[4]}:" . 90 "{$stat_arr[5]}:{$stat_arr[6]}:{$stat_arr[7]}:{$stat_arr[8]}:{$stat_arr[9]}" 91 ); 92 flock( $lock, LOCK_UN ); 93 } 94 fclose( $lock ); 87 95 } 88 $stat_arr = explode(':', $stats .':');89 ++$stat_arr[ $loglevel ];90 91 @ file_put_contents(92 $stat_file,93 "<?php exit; ?>{$stat_arr[0]}:{$stat_arr[1]}:{$stat_arr[2]}:{$stat_arr[3]}:{$stat_arr[4]}:" .94 "{$stat_arr[5]}:{$stat_arr[6]}:{$stat_arr[7]}:{$stat_arr[8]}:{$stat_arr[9]}",95 LOCK_EX96 );97 96 98 97 /** … … 168 167 } 169 168 169 170 /** 171 * Read the firewall statistics file. 172 */ 173 public static function read_stats( $stat_file ) { 174 175 if ( is_file( $stat_file ) ) { 176 $stats = file_get_contents( $stat_file, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES ); 177 $stats = str_replace('<?php exit; ?>', '', $stats ); 178 } else { 179 $stats = '0:0:0:0:0:0:0:0:0:0'; 180 } 181 $stat_arr = explode(':', $stats .':'); 182 return $stat_arr; 183 } 184 170 185 } 171 186 -
ninjafirewall/trunk/lib/helpers.php
r3706976 r3730571 961 961 962 962 return new WP_Error( 963 'n fw_rest_api_access_restricted',963 'ninjafirewall_access_restricted', 964 964 esc_html__('Forbidden access', 'ninjafirewall'), 965 965 ['status' => $nfw_options['ret_code'] ] … … 999 999 } 1000 1000 1001 if ( strpos( $req->get_route(), '/wp/v2/users') !== false && 1002 ! current_user_can('list_users') ) { 1001 /** 1002 * We don't want to block internal calls to the API, so we don't rely on $req->get_route(). 1003 * See https://wordpress.org/support/topic/logged-in-whitelisted-allow-rest-for-logged-in-users/ 1004 */ 1005 $requested_path = ''; 1006 // WordPress checks rest_route first, then REQUEST_URI. 1007 if ( isset( $_REQUEST['rest_route'] ) ) { 1008 $requested_path = NinjaFirewall_data::normalize( $_REQUEST['rest_route'], [] ); 1009 } elseif ( isset( $_SERVER['REQUEST_URI'] ) ) { 1010 $requested_path = NinjaFirewall_data::normalize( $_SERVER['REQUEST_URI'], [] ); 1011 } 1012 1013 if ( stripos( $requested_path, '/wp/v2/users') !== false && ! current_user_can('list_users') ) { 1003 1014 1004 1015 NinjaFirewall_log::write( … … 1009 1020 1010 1021 return new WP_Error( 1011 'n fw_rest_api_access_restricted',1022 'ninjafirewall_access_restricted', 1012 1023 __('Forbidden access', 'ninjafirewall'), 1013 1024 ['status' => $nfw_options['ret_code'] ] -
ninjafirewall/trunk/lib/settings_dashboard_statistics.php
r3563526 r3730571 32 32 $statx = $_GET['statx']; 33 33 } 34 // Make sure the stat file exists: 35 $stat_file = NFW_LOG_DIR . "/nfwlog/stats_{$statx}.php"; 36 // Parse it: 37 if ( file_exists( $stat_file ) ) { 38 $nfw_stat = file_get_contents( $stat_file, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES ); 39 $nfw_stat = str_replace( '<?php exit; ?>', '', $nfw_stat ); 40 } else { 41 $nfw_stat = '0:0:0:0:0:0:0:0:0:0'; 34 35 /** 36 * Retrieve the stats. 37 */ 38 $nfw_stat = NinjaFirewall_log::read_stats( NFW_LOG_DIR ."/nfwlog/stats_{$statx}.php"); 39 $medium = $nfw_stat[ 1 ]; 40 $high = $nfw_stat[ 2 ]; 41 $critical = $nfw_stat[ 3 ]; 42 if (! $medium && ! $high && ! $critical ) { 42 43 goto NO_STATS; 43 44 } 45 44 46 // Look for the corresponding firewall log: 45 47 $log_file = NFW_LOG_DIR . "/nfwlog/firewall_{$statx}.php"; … … 65 67 66 68 NO_STATS: 67 list( $tmp, $medium, $high, $critical ) = explode( ':', $nfw_stat ); 68 $medium = (int) $medium; 69 $high = (int) $high; 69 $medium = (int) $medium; 70 $high = (int) $high; 70 71 $critical = (int) $critical; 72 71 73 $total = $critical + $high + $medium; 72 74 $c = $critical; $h = $high; $m = $medium; -
ninjafirewall/trunk/lib/settings_login_protection.php
r3706976 r3730571 28 28 echo ' 29 29 <div class="wrap"> 30 <h1><img style="vertical-align:top" src="'. plugins_url( '/ninjafirewall/images/ninjafirewall_32.png' ) .'"> ' . __('Login Protection', 'ninjafirewall') . '</h1>'; 30 <h1><img style="vertical-align:top" src="'. plugins_url( '/ninjafirewall/images/ninjafirewall_32.png' ) . 31 '"> ' . __('Login Protection', 'ninjafirewall') . '</h1>'; 31 32 32 33 // Saved ? … … 143 144 $get_post = 'POST'; 144 145 } 146 147 /** 148 * Make sure gd_info() and imagettftext() are loaded. 149 */ 150 $captcha_disabled = ''; 151 if (! function_exists('gd_info') ) { 152 $captcha_disabled = ' disabled="disabled"'; 153 echo '<div class="error notice is-dismissible"><p>' . 154 sprintf( 155 esc_html__('Error: The PHP %s function doesn\'t exist, the captcha protection is not available.', 156 'ninjafirewall'), 'gd_info()' 157 ) .'</p></div>'; 158 $config['bf_type'] = 0; 159 } 160 if (! function_exists('imagettftext') ) { 161 $captcha_disabled = ' disabled="disabled"'; 162 echo '<div class="error notice is-dismissible"><p>' . 163 sprintf( 164 esc_html__('Error: The PHP %s function doesn\'t exist, the captcha protection is not available.', 165 'ninjafirewall'), 'imagettftext()' 166 ) .'</p></div>'; 167 $config['bf_type'] = 0; 168 } 169 145 170 ?> 146 171 <script type="text/javascript"> … … 189 214 } 190 215 191 // Make sure we can display the captcha with the GD extension:192 if ( function_exists( 'gd_info' ) ) {193 $missing_gd = '';194 $gd_disabled = '';195 } else {196 $missing_gd = '<p class="description">' .197 __( 'GD Support is not available on your server, the CAPTCHA option is disabled.', 'ninjafirewall' ) . '</p>';198 $gd_disabled = ' disabled="disabled"';199 }200 if ( $gd_disabled && $config['bf_type'] == 1 ) {201 echo '<div class="error notice is-dismissible"><p>' .202 __('Error: GD Support is not available on your server, the captcha protection will not work!', 'ninjafirewall') .'</p></div>';203 }204 216 nfw_contextual_help(); 205 217 ?> … … 226 238 <td> 227 239 <p><label><input type="radio" name="nfw_options[bf_type]" value="0"<?php checked($config['bf_type'], 0) ?> onclick="nfwjs_toggle_table(bf_enable, 0);"> <?php _e('Username + Password', 'ninjafirewall') ?></label></p> 228 <p><label><input type="radio" name="nfw_options[bf_type]" value="1"<?php checked($config['bf_type'], 1) ?> onclick="nfwjs_toggle_table(bf_enable, 1);"<?php echo $gd_disabled ?> /> <?php _e('Captcha image', 'ninjafirewall') ?></label></p> 229 <?php echo $missing_gd ?> 240 <p><label><input type="radio" name="nfw_options[bf_type]" value="1"<?php checked($config['bf_type'], 1) ?> onclick="nfwjs_toggle_table(bf_enable, 1);"<?php echo $captcha_disabled ?> /> <?php _e('Captcha image', 'ninjafirewall') ?></label></p> 230 241 </td> 231 242 </tr> … … 399 410 400 411 $nfw_options = nfw_get_option('nfw_options'); 401 402 /**403 * Get current configuration (mostly needed to retrieve 'auth_pass').404 */405 412 $config = []; 406 if ( file_exists( NFW_LOG_DIR .'/nfwlog/cache/login_protection.php') ) {407 $config = NinjaFirewall_bruteforce::read_config( NFW_LOG_DIR .'/nfwlog/cache/login_protection.php');408 }409 413 410 414 if ( empty( $_POST['ui_enabled'] ) ) { -
ninjafirewall/trunk/lib/widget.php
r2824119 r3730571 43 43 function nfw_stats_widget() { 44 44 45 $stat_file = NFW_LOG_DIR . '/nfwlog/stats_' . date( 'Y-m' ) . '.php';46 if ( file_exists( $stat_file ) ) {47 $nfw_stat = file_get_contents( $stat_file, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES );48 $nfw_stat = str_replace( '<?php exit; ?>', '', $nfw_stat);49 } else {50 $nfw_stat = '0:0:0:0:0:0:0:0:0:0';51 }52 list($tmp, $medium, $high, $critical) = explode(':', $nfw_stat . ':'); 53 $medium 54 $high 55 $critical 56 $total 45 /** 46 * Retrieve the stats. 47 */ 48 $nfw_stat = NinjaFirewall_log::read_stats( NFW_LOG_DIR .'/nfwlog/stats_'. date( 'Y-m' ) .'.php'); 49 $medium = $nfw_stat[ 1 ]; 50 $high = $nfw_stat[ 2 ]; 51 $critical = $nfw_stat[ 3 ]; 52 53 $medium = (int) $medium; 54 $high = (int) $high; 55 $critical = (int) $critical; 56 $total = $critical + $high + $medium; 57 57 if ( $total ) { 58 $coef 59 $critical 60 $high 61 $medium 58 $coef = 100 / $total; 59 $critical = round( $critical * $coef, 2); 60 $high = round( $high * $coef, 2); 61 $medium = round( $medium * $coef, 2); 62 62 } 63 63 echo ' -
ninjafirewall/trunk/ninjafirewall.php
r3706976 r3730571 4 4 Plugin URI: https://nintechnet.com/ 5 5 Description: A true Web Application Firewall to protect and secure WordPress. 6 Version: 4.9. 16 Version: 4.9.2 7 7 Author: The Ninja Technologies Network 8 8 Author URI: https://nintechnet.com/ … … 12 12 Domain Path: /languages 13 13 */ 14 define('NFW_ENGINE_VERSION', '4.9. 1');14 define('NFW_ENGINE_VERSION', '4.9.2'); 15 15 /* 16 16 +=====================================================================+ -
ninjafirewall/trunk/readme.txt
r3706976 r3730571 4 4 Requires at least: 4.9 5 5 Tested up to: 7.1 6 Stable tag: 4.9. 16 Stable tag: 4.9.2 7 7 Requires PHP: 7.1 8 8 License: GPLv3 or later … … 210 210 Need more security? Take the time to explore our supercharged Premium edition: [NinjaFirewall WP+ Edition](https://nintechnet.com/ninjafirewall/wp-edition/#features) 211 211 212 = 4.9.2 = 213 214 * Fixed bugs related to the login protection, the user ennumeration REST API hook and the firewall statistics file. 215 * WP+ Edition (Premium): Updated IP location databases. 216 212 217 = 4.9.1 = 213 218 -
ninjafirewall/updates/rules4.txt
r3706976 r3730571 1 2026 0915.1|MmO72QuxwS+DF1I6wXTxdGLIImvKGzI/geOOGYZWedDHiB5uYam+hJaVqmWXoMnCoGLp5TIgrIpS1GUVxE63qNITPOm141xbFIdTPBhBmZ+sN66vsRFu/FjrbudEuZRnZXjtnqZYehm3iDjU7foZiwR02vxmGb/gz3onniGKh5nvs86zJXc+yVR7enb+dokjc8TEADZ/CcUWfH+UZH//krykoyKebj54qkQevZtI4YQO9C4hQiTnKCz9fi5ec4v9wVSaiTD74aCA/6Qp7H9fmD9+xj05jNBielgQKg2CV/I5XjzH2P6iD9enKUvYhVqfgnoauKCdsu5dLSnwdOIJTt8TGXGMOgSVIEjK0WNvY331jiUfvqOCYznuBhag5spDrC7l/SY71p6z4HTDxj3OmOkV4R7JuzwLMz0k27SotFsOZhRCOC0iI1Vur0llHz8fUHTEtd8H+d61RNE1DWK3Ap7xo7luufPSYgxlg4Z34VXt0EAJQAhstJLj0gdio/eUjUYBd6BQP25dsTDIeUCfy5lLTAU4dgegWCDN/8J/HRtCNwES3Fvsvv/ZiCgOdYAZh7p6Kx5QIrFGw9Og6Fes22smKxbRMGDy8K/n53tmwNPFzlrbo3EyGvgLxJpuS3B2WRbmKcqc/cj9JJc/HqT5Q+zh5GAxxX8qZLI+K1GXtZc=|a:274:{i:1;a:4:{s:3:"why";s:22:"Directory traversal #1";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:45:"GET|COOKIE|HTTP_USER_AGENT|PHP_SELF|PATH_INFO";s:3:"wha";s:26:"(?:\.{2}[\\/]+){2}[a-zA-Z]";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:2;a:4:{s:3:"why";s:32:"ASCII character 0x00 (NULL byte)";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:88:"GET|POST|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER|REQUEST_URI|PHP_SELF|PATH_INFO|FILES";s:3:"wha";s:3:"\x0";s:3:"ope";i:5;s:3:"noc";i:1;}}}i:3;a:4:{s:3:"why";s:20:"Local file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:33:"GET|COOKIE|SERVER:HTTP_USER_AGENT";s:3:"wha";s:29:"\b(?:proc/self/|etc/passwd)\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:4;a:4:{s:3:"why";s:20:"Local file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:4:"POST";s:3:"wha";s:13:"\betc/passwd$";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:5;a:4:{s:3:"why";s:20:"Local file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:33:"GET|COOKIE|SERVER:HTTP_USER_AGENT";s:3:"wha";s:66:"\b(?i)(?:include|require)(?:_once)?\s*.{0,10}\s*sys_get_temp_dir\b";s:3:"ope";i:5;}}}i:6;a:4:{s:3:"why";s:22:"Directory traversal #2";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:4:"POST";s:3:"wha";s:35:"(?:\.{2}[\\/]+){2,}[-\w/\s.]+\.php$";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:7;a:4:{s:3:"why";s:19:"XML External Entity";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:3:"RAW";s:3:"wha";s:51:"<!ENTITY[\s+]+(?:%[\s+]+)?\w+[\s+]+SYSTEM[\s+]+["']";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:8;a:5:{s:3:"why";s:15:"Suspicious file";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:5:"FILES";s:3:"wha";s:45:"\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b";s:3:"ope";i:5;}}s:3:"cpb";s:17:"unfiltered_upload";}i:50;a:4:{s:3:"why";s:21:"Remote file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:24:"GET|POST|HTTP_USER_AGENT";s:3:"wha";s:34:"^(?i:https?|ftp)://.+/[^&/\s@]+\?$";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:51;a:4:{s:3:"why";s:21:"Remote file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:118:"^(?i)https?://(?:(?:[hp]astebin\.com|textbin\.net|gist\.githubusercontent\.com/.+?)/raw|raw\.githubusercontent\.com)/.";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:52;a:4:{s:3:"why";s:21:"Remote file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:26:"GET|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:66:"\b(?i)(?:include|require)(?:_once)?\s*.{0,10}["'](?:https?|ftp)://";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:53;a:4:{s:3:"why";s:21:"Remote file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:31:"GET|POST|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:33:"^(?i:ftp)://(?:.+?:.+?\@)?[^/]+/.";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:54;a:4:{s:3:"why";s:28:"Remote code execution (http)";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:31:"GET|POST|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:37:"^(?:curl|wget)\s+.*\b(?i)https?://.+?";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:100;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:60:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES|HTTP_FORWARDED";s:3:"wha";s:107:"<(?i:applet|embed|form|i?frame(?:set)?|i(?:mg|sindex)|link|m(?:eta|arquee)|object|script|textarea)\b.*=.*?>";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:101;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:78:"\W(?:background(-image)?|-moz-binding)\s*:[^}]*?\burl\s*\([^)]+?(https?:)?//\w";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:102;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:32:"GET|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:134:"<.+?(?i)\b(?:href|(?:form)?action|background|code|data|location|name|poster|src|value)\s*=\s*\\?['"]?(?:(?:f|ht)tps?:)?\\?/\\?/\w+\.\w";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:104;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:26:"GET|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:115:"\b(?:alert|confirm|eval|expression|prompt|set(?:Timeout|Interval)|String\s*\.\s*fromCharCode|\.\s*substr)\s*\(.*?\)";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:105;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:26:"GET|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:69:"\bdocument\s*\.\s*(?:body|cookie|domain|location|open|write(?:ln)?)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:106;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:26:"GET|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:36:"\blocation\s*\.\s*(?:href|replace)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:107;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:26:"GET|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:35:"\bwindow\s*\.\s*(?:open|location)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:108;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:13:"(?i)<style\b.";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:109;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:4:"POST";s:3:"wha";s:50:"\beval\s*\(\s*String\s*\.\s*fromCharCode\s*\(\s*\d";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:110;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:45:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:2764:"(?i)<[a-z].+?\bon(?:d(?:e(?:vice(?:(?:orienta|mo)tion|proximity|found|light)|livery(?:success|error)|activate)|r(?:ag(?:e(?:n(?:ter|d)|xit)|(?:gestur|leav)e|start|drop|over)|op)|i(?:s(?:c(?:hargingtimechange|onnect(?:ing|ed))|abled)|aling)|ata(?:setc(?:omplete|hanged)|(?:availabl|chang)e|error)|urationchange|ownloading|blclick)|Moz(?:M(?:agnifyGesture(?:Update|Start)?|ouse(?:PixelScroll|Hittest))|S(?:wipeGesture(?:Update|Start|End)?|crolledAreaChanged)|(?:(?:Press)?TapGestur|BeforeResiz)e|EdgeUI(?:C(?:omplet|ancel)|Start)ed|RotateGesture(?:Update|Start)?|A(?:udioAvailable|fterPaint))|c(?:o(?:m(?:p(?:osition(?:update|start|end)|lete)|mand(?:update)?)|n(?:t(?:rolselect|extmenu)|nect(?:ing|ed))|py)|a(?:(?:llschang|ch)ed|nplay(?:through)?|rdstatechange)|h(?:(?:arging(?:time)?ch)?ange|ecking)|(?:fstate|ell)change|u(?:echange|t)|l(?:ick|ose))|s(?:t(?:a(?:t(?:uschanged|echange)|lled|rt)|k(?:sessione|comma)nd|op)|e(?:ek(?:complete|ing|ed)|(?:lec(?:tstar)?)?t|n(?:ding|t))|(?:peech|ound)(?:start|end)|u(?:ccess|spend|bmit)|croll|how)|m(?:o(?:z(?:(?:pointerlock|fullscreen)(?:change|error)|(?:orientation|time)change|network(?:down|up)load)|use(?:(?:lea|mo)ve|o(?:ver|ut)|enter|wheel|down|up)|ve(?:start|end)?)|essage|ark)|a(?:n(?:imation(?:iteration|start|end)|tennastatechange)|fter(?:(?:scriptexecu|upda)te|print)|udio(?:process|start|end)|d(?:apteradded|dtrack)|ctivate|lerting|bort)|b(?:e(?:fore(?:(?:(?:de)?activa|scriptexecu)te|u(?:nload|pdate)|p(?:aste|rint)|c(?:opy|ut)|editfocus)|gin(?:Event)?)|oun(?:dary|ce)|l(?:ocked|ur)|roadcast|usy)|DOM(?:Node(?:Inserted(?:IntoDocument)?|Removed(?:FromDocument)?)|(?:CharacterData|Subtree)Modified|A(?:ttrModified|ctivate)|Focus(?:Out|In)|MouseScroll)|r(?:e(?:s(?:u(?:m(?:ing|e)|lt)|ize|et)|adystatechange|pea(?:tEven)?t|movetrack|trieving|ceived)|ow(?:s(?:inserted|delete)|e(?:nter|xit))|atechange)|p(?:op(?:up(?:hid(?:den|ing)|show(?:ing|n))|state)|a(?:ge(?:hide|show)|(?:st|us)e|int)|ro(?:pertychange|gress)|lay(?:ing)?)|t(?:ouch(?:(?:lea|mo)ve|en(?:ter|d)|cancel|start)|ransition(?:cancel|end|run)|ime(?:update|out)|ext)|u(?:s(?:erproximity|sdreceived)|p(?:gradeneeded|dateready)|n(?:derflow|load))|f(?:o(?:rm(?:change|input)|cus(?:out|in)?)|i(?:lterchange|nish)|ailed)|l(?:o(?:ad(?:e(?:d(?:meta)?data|nd)|start)|secapture)|evelchange|y)|g(?:amepad(?:(?:dis)?connected|button(?:down|up)|axismove)|et)|e(?:n(?:d(?:Event|ed)?|abled|ter)|rror(?:update)?|mptied|xit)|i(?:cc(?:cardlockerror|infochange)|n(?:coming|valid|put))|o(?:(?:(?:ff|n)lin|bsolet)e|verflow(?:changed)?|pen)|SVG(?:(?:Unl|L)oad|Resize|Scroll|Abort|Error|Zoom)|h(?:e(?:adphoneschange|l[dp])|ashchange|olding)|v(?:o(?:lum|ic)e|ersion)change|w(?:a(?:it|rn)ing|heel)|key(?:press|down|up)|(?:AppComman|Loa)d|no(?:update|match)|Request|zoom)\s*=.+?";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:111;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"POST|RAW";s:3:"wha";s:2767:"(?i)<[a-z].+?\bon(?:d(?:e(?:vice(?:(?:orienta|mo)tion|proximity|found|light)|livery(?:success|error)|activate)|r(?:ag(?:e(?:n(?:ter|d)|xit)|(?:gestur|leav)e|start|drop|over)|op)|i(?:s(?:c(?:hargingtimechange|onnect(?:ing|ed))|abled)|aling)|ata(?:setc(?:omplete|hanged)|(?:availabl|chang)e|error)|urationchange|ownloading|blclick)|Moz(?:M(?:agnifyGesture(?:Update|Start)?|ouse(?:PixelScroll|Hittest))|S(?:wipeGesture(?:Update|Start|End)?|crolledAreaChanged)|(?:(?:Press)?TapGestur|BeforeResiz)e|EdgeUI(?:C(?:omplet|ancel)|Start)ed|RotateGesture(?:Update|Start)?|A(?:udioAvailable|fterPaint))|c(?:o(?:m(?:p(?:osition(?:update|start|end)|lete)|mand(?:update)?)|n(?:t(?:rolselect|extmenu)|nect(?:ing|ed))|py)|a(?:(?:llschang|ch)ed|nplay(?:through)?|rdstatechange)|h(?:(?:arging(?:time)?ch)?ange|ecking)|(?:fstate|ell)change|u(?:echange|t)|l(?:ick|ose))|s(?:t(?:a(?:t(?:uschanged|echange)|lled|rt)|k(?:sessione|comma)nd|op)|e(?:ek(?:complete|ing|ed)|(?:lec(?:tstar)?)?t|n(?:ding|t))|(?:peech|ound)(?:start|end)|u(?:ccess|spend|bmit)|croll|how)|m(?:o(?:z(?:(?:pointerlock|fullscreen)(?:change|error)|(?:orientation|time)change|network(?:down|up)load)|use(?:(?:lea|mo)ve|o(?:ver|ut)|enter|wheel|down|up)|ve(?:start|end)?)|essage|ark)|a(?:n(?:imation(?:iteration|start|end)|tennastatechange)|fter(?:(?:scriptexecu|upda)te|print)|udio(?:process|start|end)|d(?:apteradded|dtrack)|ctivate|lerting|bort)|b(?:e(?:fore(?:(?:(?:de)?activa|scriptexecu)te|u(?:nload|pdate)|p(?:aste|rint)|c(?:opy|ut)|editfocus)|gin(?:Event)?)|oun(?:dary|ce)|l(?:ocked|ur)|roadcast|usy)|DOM(?:Node(?:Inserted(?:IntoDocument)?|Removed(?:FromDocument)?)|(?:CharacterData|Subtree)Modified|A(?:ttrModified|ctivate)|Focus(?:Out|In)|MouseScroll)|r(?:e(?:s(?:u(?:m(?:ing|e)|lt)|ize|et)|adystatechange|pea(?:tEven)?t|movetrack|trieving|ceived)|ow(?:s(?:inserted|delete)|e(?:nter|xit))|atechange)|p(?:op(?:up(?:hid(?:den|ing)|show(?:ing|n))|state)|a(?:ge(?:hide|show)|(?:st|us)e|int)|ro(?:pertychange|gress)|lay(?:ing)?)|t(?:ouch(?:(?:lea|mo)ve|en(?:ter|d)|cancel|start)|ransition(?:cancel|end|run)|ime(?:update|out)|ext)|u(?:s(?:erproximity|sdreceived)|p(?:gradeneeded|dateready)|n(?:derflow|load))|f(?:o(?:rm(?:change|input)|cus(?:out|in)?)|i(?:lterchange|nish)|ailed)|l(?:o(?:ad(?:e(?:d(?:meta)?data|nd)|start)|secapture)|evelchange|y)|g(?:amepad(?:(?:dis)?connected|button(?:down|up)|axismove)|et)|e(?:n(?:d(?:Event|ed)?|abled|ter)|rror(?:update)?|mptied|xit)|i(?:cc(?:cardlockerror|infochange)|n(?:coming|valid|put))|o(?:(?:(?:ff|n)lin|bsolet)e|verflow(?:changed)?|pen)|SVG(?:(?:Unl|L)oad|Resize|Scroll|Abort|Error|Zoom)|h(?:e(?:adphoneschange|l[dp])|ashchange|olding)|v(?:o(?:lum|ic)e|ersion)change|w(?:a(?:it|rn)ing|heel)|key(?:press|down|up)|(?:AppComman|Loa)d|no(?:update|match)|Request|zoom)\s*=\s*.+?";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:112;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:42:"<.+?(?i)[a-z]+\s*=.*?(?:java|vb)script:.+?";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:113;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:4:"POST";s:3:"wha";s:42:"<.+?(?i)[a-z]+\s*=.*?(?:java|vb)script:.+?";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:114;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:64:"QUERY_STRING|GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|REQUEST_URI";s:3:"wha";s:14:"(?i)<script\b.";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:115;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"POST|RAW";s:3:"wha";s:14:"(?i)<script\b.";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:116;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:48:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|RAW";s:3:"wha";s:12:"<x:script\b.";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:117;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:42:"[{}+[\]\s]\+\s*\[\s*]\s*\)\s*\[[{!}+[\]\s]";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:118;a:4:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:38:"\+A(?:Dw|ACIAPgA8)-.+?\+AD4(?:APAAi)?-";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:119;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:43:"POST|GET|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:349:"(?i)[\s"'\x60;,\/0-9=\x0B\x09\x0C(]+on(?:abort|blur|change|click|close|dblclick|dragdrop|endevent|error|exit|focus(?:in|out)?|formchange|form(?:data|input)|input|key(?:down|press|statuschange|up)|load[a-z]{0,10}|(?:mouse|pointer)[a-z]{2,10}|move|move(?:end|start)|reset|resize|noupdate|scroll|select|submit|success|svgload|timeout|unload)\s*[=;,|'"]";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:120;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:29:"(?i)<[a-z]+\\?/[a-z]+.+?=.+?>";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:121;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:67:"\batob\s*(?:['"\x60]\s*\]\s*)?\(\s*(['"\x60])[a-zA-Z0-9/+=]+\1\s*\)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}s:3:"cpb";s:15:"unfiltered_html";}i:122;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:90:"\[\s*\]\s*\[\s*['"\x60]filter['"\x60]\s*\]\s*\[\s*['"\x60]constructor['"\x60]\s*\]\s*\(\s*";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}s:3:"cpb";s:15:"unfiltered_html";}i:123;a:4:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:3:"GET";s:3:"wha";s:44:"\b(?:document|window|this)\s*\[.+?\]\s*[\[(]";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}}i:125;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:19:"GET|HTTP_USER_AGENT";s:3:"wha";s:167:"(?:(?:\b(?:self|this|top|window)\s*\[.+?\]|\(\s*(?:alert|confirm|eval|expression|prompt)\s*\)|\[.*?\]\s*\.\s*find)|(?:\.\s*(?:re(?:ject|place)|constructor)))\s*\(.*?\)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}s:3:"cpb";s:15:"unfiltered_html";}i:126;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:19:"GET|HTTP_USER_AGENT";s:3:"wha";s:73:"\b(\w+)\s*=\s*(?:alert|confirm|eval|expression|prompt)\s*[;,]\1\s*\(.*?\)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}s:3:"cpb";s:15:"unfiltered_html";}i:127;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:19:"GET|HTTP_USER_AGENT";s:3:"wha";s:115:"\bFunction\s*[({].*?[})]\s*\(.*?\)|\bfunction\s*\(.+?\)\s*{.+?}|(?:\[|new)\s*class\s*extends\b|\bArray\s*.\s*from\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}s:3:"cpb";s:15:"unfiltered_html";}i:128;a:5:{s:3:"why";s:22:"Attribute JS injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:51:"POST|GET|SERVER:HTTP_REFERER|SERVER:HTTP_USER_AGENT";s:3:"wha";s:37:"(?i)(?:\W|^)javascript:(?!void\().{8}";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:150;a:4:{s:3:"why";s:21:"Mail header injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:53:"\x0A\b(?i:(?:reply-)?to|b?cc|content-[td]\w)\s*:.*?\@";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"noc";i:1;}}}i:153;a:4:{s:3:"why";s:21:"SSI command injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:56:"<!--#(?:config|echo|exec|flastmod|fsize|include)\b.+?-->";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:154;a:4:{s:3:"why";s:14:"Code injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:35:"COOKIE|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:31:"(?s:<\?.+)|#!/(?:usr|bin)/.+?\s";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:155;a:4:{s:3:"why";s:14:"Code injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:31:"GET|POST|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:405:"(?:<\?(?![Xx][Mm][Ll]).*?(?:\$_?(?:COOKIE|ENV|FILES|GLOBALS|(?:GE|POS|REQUES)T|SE(RVER|SSION))\s*[=\[)]|\b(?i:array_map|assert|base64_(?:de|en)code|curl_exec|eval|(?:ex|im)plode|file(?:_get_contents)?|fsockopen|function_exists|gzinflate|move_uploaded_file|passthru|[ep]reg_replace|phpinfo|stripslashes|strrev|substr|system|(?:shell_)?exec)\s*(?:/\*.+?\*/\s*)?\())|#!/(?:usr|bin)/.+?\s|\W\$\{\s*['"]\w+['"]";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:156;a:4:{s:3:"why";s:14:"Code injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:31:"GET|POST|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:115:"\b(?i:eval)\s*\(\s*(?i:base64_decode|exec|file_get_contents|gzinflate|passthru|shell_exec|stripslashes|system)\s*\(";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:157;a:4:{s:3:"why";s:14:"Code injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:12:"CONTENT_TYPE";s:3:"wha";s:16:"application/json";s:3:"ope";i:4;}i:2;a:4:{s:3:"whe";s:3:"RAW";s:3:"wha";s:6:"<?php ";s:3:"ope";i:4;s:3:"nor";i:1;}}}i:160;a:4:{s:3:"why";s:40:"Shellshock vulnerability (CVE-2014-6271)";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:10:"GET|SERVER";s:3:"wha";s:16:"^\s*\(\s*\)\s*\{";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:250;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:5:{s:3:"whe";s:14:"GET|POST|FILES";s:3:"wha";s:43:"^[-\d';].+\w.+(?:--[\x00-\x20\x7f]*|#|/\*)$";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"cap";i:1;}i:2;a:3:{s:3:"wha";s:266:"(?i)(?:\b|\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\s+(?:not\s+)?null|limit|load(?:_file)?|order\s+by|password|rename|r?like|select|(?:pg_)?sleep|substring|table|truncate|union|update)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:251;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:49:"(?i)(?:\b|\d)(?:ceil|concat|conv|floor|version)\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"cap";i:1;}i:2;a:3:{s:3:"wha";s:35:"(?i)(?:\b|\d)(?:pi\s*\(.*?\).+?){3}";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:253;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:15:"GET|POST|COOKIE";s:3:"wha";s:43:"^(?i:admin(?:istrator)?)['"].*?(?:--|#|/\*)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:254;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:84:"(?i)\b[-\w]+@(?:[-a-z0-9]+\.)+[a-z]{2,8}'.{0,20}[^a-z](?:\band\b|&&).{0,20}=[\s/*]*'";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:255;a:4:{s:3:"why";s:32:"SQL injection (JSON obfuscation)";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:102:"(?:\band\b|\bor\b|\bhaving\b|&&|\|\|).{0,250}\b(?:(?:\w+)\s*(?:@>|<@)\s*'{"|'{"\s*(?:@>|<@)\s*(?:\w+))";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:256;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:96:"(?:\band\b|\bor\b|\bhaving\b|&&|\|\|)\s*(?:\d+\s*)+(?:[!<]?=|=>?|[<>]|(?:not\s+)?like)(?:\s*\d)+";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:257;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:107:"(?:\band\b|\bor\b|\bhaving\b|&&|[^|]\|\|[^|]).{0,250}\b(\w+)\b\s*(?:[!<]?=|=>?|[<>]|(?:not\s+)?like)\s*\1\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:258;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:15:"GET|POST|SERVER";s:3:"wha";s:65:".{5}\bfrom\b.{1,30}\b(?:information|performance)_schema\s*\.\s*\w";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:259;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:5:{s:3:"whe";s:50:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:53:"^-?\d+.{0,30}(?:\band\b.{0,30})?\b(?i:union|select)\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"cap";i:1;}i:2;a:3:{s:3:"wha";s:261:"(?i)(?:\b|\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\s+(?:not\s+)?null|limit|load(?:_file)?|order\s+by|password|rename|r?like|(?:pg_)?sleep|substring|table|truncate|update|version)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:260;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:50:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|POST|FILES";s:3:"wha";s:63:"^(?:\b(?:null|and|or)\b|\|\||&&)?\s*union\s+(?:all\s+)?select\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:261;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:6:{s:3:"whe";s:44:"GET|HTTP_REFERER|HTTP_USER_AGENT|REQUEST_URI";s:3:"wha";s:52:"(?:\b(?:null|and|or)\b|\|\||&&)\s*.{0,50}\bselect\b.";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;s:3:"cap";i:1;}i:2;a:3:{s:3:"wha";s:267:"(?i)(?:\b|\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\s+(?:not\s+)?null|limit|load(?:_file)?|order\s+by|password|rename|r?like|(?:pg_)?sleep|substring|table|truncate|union|update|version)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:262;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:6:{s:3:"whe";s:45:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:36:"^.{0,10}\bselect\b\s.{1,50}\bfrom\b.";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;s:3:"cap";i:1;}i:2;a:3:{s:3:"wha";s:273:"(?i)(?:\b|\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\s+(?:not\s+)?null|limit|load(?:_file)?|order\s+by|password|rename|r?like|(?:pg_)?sleep|substring|table|truncate|union|update|version|where)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:263;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:45:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:16:"union all select";s:3:"ope";i:3;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:264;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:13:"select concat";s:3:"ope";i:3;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:265;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:4:"POST";s:3:"wha";s:48:"^.{0,15}\bunion\s+select\b.{1,100}(from|where)\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:267;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:50:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:179:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\balter\s+(?:(?:database|schema)\b|table\s+.{1,70}\s+rename\b|(?:ignore\s+)?table\b|user\b(?:\s+if\s+exists\s)?.{1,38}@).{1,70}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:268;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:187:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\bcreate\s+(?:(?:database|schema|(?:temporary\s+)?table)\s+(?:if\s+not\s+exists\b)?.{1,70}|user\s+.{1,38}@.{1,38}\s+identified\s+by\s+)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:269;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:50:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:186:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\bdrop\s+(?:(?:table\b|index\b.{1,60}\son\b|(?:database|schema)\s+(?:if\s+exists\b)?).{1,70}|user\s+(?:if\s+exists\b)?.{1,38}@.{1,38})";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:270;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:92:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\brename\s+table\s+.{1,70}\s+to\s.{1,70}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:271;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:50:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:151:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\bload\s+data\s+(?:(?:low_priority\s+|concurrent\s+)?local\s+)?infile\b.{1,500}\binto\s+table\b.{2}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:272;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:79:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\btruncate\s+table\s.{1,70}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:273;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:110:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\bselect\b.{1,200}\binto\s+(?:(?:dump|out)file\s|@\w).{10}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:274;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:77:"^.{0,50}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,30})?\bload_file\s+/.{3,15}/\w";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:275;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:113:"^.{0,50}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,30})?\bdelete\b.{1,100}\bfrom\b.{1,100}\bwhere\b.{1,100}(?:=|null)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:276;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:124:"^.{0,50}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,30})?\bset\s+password\b(?:\s+for\s.{1,38}@.{1,60}=|\s*=.+?\bwhere\s+user\s*=)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:277;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:74:"(?i)(?:\b|\d)insert\b.+?(?:\b|\d)into\b.{1,150}(?:\b|\d)values\b.*?\(.+?\)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:278;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:86:"^.{0,50}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,30})?\bupdate\s.{1,100}\bset\s.{1,50}=.";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:279;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:60:"\bgroup\s+\bby\s.{1,200}\bhaving\s.{1,50}(?:[!<]?=|=>?|[<>])";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:280;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:25:"^.{0,10}\border\s+by\s+\d";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:281;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:33:"^.{0,10}\band\s+extractvalue\s+\w";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:282;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:33:"\bbenchmark\s+\d{5,10}\s+[a-z]{2}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:283;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:36:"\bfloor\s+rand\s+(?:\d+\s*)?\*\s*\d+";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:284;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:30:"\bcase\b.+?\bwhen\b.+?\bthen\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:285;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:29:"^.{0,100}\s(?:pg_)?sleep\s\d+";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:286;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:30:"(?i)\d\s+procedure\s+analyse\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:287;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:59:"waitfor\s+delay\s*\d+(?:\.\d+)?:\d+(?:\.\d+)?:\d+(?:\.\d+)?";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:300;a:4:{s:3:"why";s:13:"Leading quote";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:3:"GET";s:3:"wha";s:2:"^'";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:301;a:4:{s:3:"why";s:41:"Potential reflected file download attempt";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:31:"(?i)^[^?]*\.(?:bat|cmd)(?:\W|$)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:302;a:4:{s:3:"why";s:12:"PHP variable";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:22:"QUERY_STRING|PATH_INFO";s:3:"wha";s:44:"\bHTTP_RAW_POST_DATA|HTTP_(?:POS|GE)T_VARS\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:303;a:4:{s:3:"why";s:18:"phpinfo.php access";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:11:"phpinfo.php";s:3:"ope";i:4;}}}i:304;a:4:{s:3:"why";s:21:"Malformed Host header";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:9:"HTTP_HOST";s:3:"wha";s:20:"[^-a-zA-Z0-9._:\[\]]";s:3:"ope";i:5;}}}i:305;a:4:{s:3:"why";s:23:"PHP handler obfuscation";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:51:"[^/]\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b\.";s:3:"ope";i:5;}}}i:306;a:4:{s:3:"why";s:26:"Bogus user-agent signature";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:22:"SERVER:HTTP_USER_AGENT";s:3:"wha";s:50:"\b(?:compatible; MSIE [1-6]|(?i)Mozilla/[0-3])\.\d";s:3:"ope";i:5;}}}i:307;a:4:{s:3:"why";s:52:"Excessive user-agent string length (400+ characters)";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:15:"HTTP_USER_AGENT";s:3:"wha";s:7:"^.{500}";s:3:"ope";i:5;}}}i:309;a:4:{s:3:"why";s:24:"PHP predefined variables";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:65:"QUERY_STRING|PATH_INFO|COOKIE|SERVER:HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:141:"\b(?:\$?_(COOKIE|ENV|FILES|(?:GE|POS|REQUES)T|SE(RVER|SSION))|HTTP_(?:(?:POST|GET)_VARS|RAW_POST_DATA)|GLOBALS)\s*[=\[)]|\W\$\{\s*['"]\w+['"]";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:310;a:4:{s:3:"why";s:30:"Access to a configuration file";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:15:"SCRIPT_NAME|GET";s:3:"wha";s:81:"\b(?i:(?:conf(?:ig(?:ur(?:e|ation)|\.inc|_global)?)?)|settings?(?:\.?inc)?)\.php$";s:3:"ope";i:5;}}}i:311;a:4:{s:3:"why";s:27:"Large set of Hex characters";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:23:"(?i:\\x[a-f0-9]{2}){25}";s:3:"ope";i:5;}}}i:312;a:4:{s:3:"why";s:16:"Non-compliant IP";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:177:"HTTP_X_FORWARDED_FOR|HTTP_CF_CONNECTING_IP|HTTP_CLIENT_IP|HTTP_FORWARDED_FOR|HTTP_INCAP_CLIENT_IP|HTTP_X_CLUSTER_CLIENT_IP|HTTP_X_FORWARDED|HTTP_X_REAL_IP|HTTP_X_SUCURI_CLIENTIP";s:3:"wha";s:30:"[^.0-9a-fA-F:\x20,unixkow\[\]]";s:3:"ope";i:5;}}}i:313;a:4:{s:3:"why";s:31:"PHP-CGI exploit (CVE-2012-1823)";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:12:"QUERY_STRING";s:3:"wha";s:19:"^-[bcndfiswzT].{20}";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:315;a:4:{s:3:"why";s:13:"Reverse shell";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:81:"GET|HTTP_HOST|SERVER:HTTP_USER_AGENT|QUERY_STRING|SERVER:HTTP_REFERER|HTTP_COOKIE";s:3:"wha";s:61:">.*?/[./]*dev/[./]*(?:tc|ud)p/[./]*[^/]{5,255}/[./]*\d{1,5}\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:316;a:4:{s:3:"why";s:13:"Reverse shell";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:81:"GET|HTTP_HOST|SERVER:HTTP_USER_AGENT|QUERY_STRING|SERVER:HTTP_REFERER|HTTP_COOKIE";s:3:"wha";s:72:"\bnc\s+(?:\d+(\.\d+){3}\s+\d+|-\w+\s+(?:\d+|/[\w/]+\s+\d+(\.\d+){3}\s+))";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:317;a:4:{s:3:"why";s:17:"Hidden PHP script";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:53:"/\.[^/]+\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b";s:3:"ope";i:5;}}}i:318;a:4:{s:3:"why";s:15:"Obfuscated data";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:36:"(?i:\bchr\s*\(\s*\d{1,3}\s*\).+?){4}";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:319;a:4:{s:3:"why";s:15:"Obfuscated data";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:5:{s:3:"whe";s:50:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:52:"(?i)concat|select|database|insert|update|union|table";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"cap";i:1;}i:2;a:4:{s:3:"wha";s:75:"\bchar\b\s(?:\d{1,3}\s){3}|(?:\bchar\b\s\d{1,3}\s(?:\|\||or|&&|and)?\s?){3}";s:3:"ope";i:5;s:3:"tra";i:1;s:3:"nor";i:1;}}}i:320;a:4:{s:3:"why";s:15:"Obfuscated data";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:22:"(?i:\\x[a-f0-9]{2}){4}";s:3:"ope";i:5;}}}i:321;a:4:{s:3:"why";s:14:"Adminer script";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:47:"/_?adminer(?:(?:-\d\.\d.\d)(?:-[\w-]+)?)?\.php$";s:3:"ope";i:5;}}}i:322;a:4:{s:3:"why";s:40:"Attempt to modify NinjaFirewall settings";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:33:"(^|\S['"])nfw_(?:options|rules)\b";s:3:"ope";i:5;}}}i:323;a:4:{s:3:"why";s:13:"Proxy attempt";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:19:"^/%EF%BB%BFhttps?:/";s:3:"ope";i:5;}}}i:351;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:17:"REQUEST:nixpasswd";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:352;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:12:"QUERY_STRING";s:3:"wha";s:16:"\bact=img&img=\w";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:353;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:12:"QUERY_STRING";s:3:"wha";s:15:"\bc=img&name=\w";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:354;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:12:"QUERY_STRING";s:3:"wha";s:36:"^image=(?:arrow|file|folder|smiley)$";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:355;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:6:"COOKIE";s:3:"wha";s:21:"\buname=.+?;\ssysctl=";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:356;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:18:"REQUEST:sql_passwd";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:357;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:12:"POST:nowpath";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:358;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:18:"POST:view_writable";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:359;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:6:"COOKIE";s:3:"wha";s:11:"phpspypass=";s:3:"ope";i:3;s:3:"nor";i:1;}}}i:360;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:6:"POST:a";s:3:"wha";s:90:"^(?:Bruteforce|Console|Files(?:Man|Tools)|Network|Php|SecInfo|SelfRemove|Sql|StringTools)$";s:3:"ope";i:5;}}}i:361;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:12:"POST:nst_cmd";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:362;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:8:"POST:cmd";s:3:"wha";s:206:"^(?:c(?:h_|URL)|db_query|echo\s\\.*|(?:edit|download|save)_file|find(?:_text|\s.+)|ftp_(?:brute|file_(?:down|up))|mail_file|mk|mysql(?:b|_dump)|php_eval|ps\s.*|search_text|safe_dir|sym[1-2]|test[1-8]|zend)$";s:3:"ope";i:5;}}}i:363;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:5:"GET:p";s:3:"wha";s:65:"^(?:chmod|cmd|edit|eval|delete|headers|md5|mysql|phpinfo|rename)$";s:3:"ope";i:5;}}}i:364;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:12:"QUERY_STRING";s:3:"wha";s:137:"^act=(?:bind|cmd|encoder|eval|feedback|ftpquickbrute|gofile|ls|mkdir|mkfile|processes|ps_aux|search|security|sql|tools|update|upload)&d=/";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:365;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:6:"SERVER";s:3:"wha";s:36:"\b(?i)(eval|base64_decode)\s*\(.+?\)";s:3:"ope";i:5;}}}i:500;a:4:{s:3:"why";s:40:"ASCII control characters (1-8 and 14-31)";s:3:"lev";i:2;s:3:"ena";i:0;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:51:"GET|POST|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER";s:3:"wha";s:20:"[\x01-\x08\x0e-\x1f]";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:510;a:4:{s:3:"why";s:38:"DOCUMENT_ROOT variable in HTTP request";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:20:"GET|POST|REQUEST_URI";s:3:"wha";s:11:"/nothingyet";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:520;a:4:{s:3:"why";s:31:"Data URI scheme or PHP wrappers";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:58:"GET|POST|COOKIE|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER";s:3:"wha";s:108:"^(?i:(?:expect|file|ph(?:ar|p)|zip)://.|.{0,90}\bdata:(?!image/(?:jpe?g|png|gif|svg\+xml)).*?;\s*base64.*?,)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:525;a:4:{s:3:"why";s:21:"Serialized PHP object";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:51:"GET|POST|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER";s:3:"wha";s:77:"^.{0,25}[;{}]?\b[OC]:\d+:"[a-zA-Z_\x7f-\xff][a-zA-Z0-9_\x7f-\xff]*":\d+:{.*?}";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:531;a:4:{s:3:"why";s:24:"Suspicious bots/scanners";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:15:"HTTP_USER_AGENT";s:3:"wha";s:343:"(?i:acunetix|backdoor|bandit|blackwidow|BOT for JCE|core-project|dts agent|emailmagnet|ex(ploit|tract)|flood|grabber|harvest|httrack|havij|HeadlessChrome|hunter|indy library|LoadTimeBot|mfibot|Microsoft URL Control|Miami Style|morfeus|nessus|NetLyzer|pmafind|scanner|Scrapy|siphon|spbot|sqlmap|survey|teleport|updown_tester|xovibot|zgrap|zmap)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:540;a:4:{s:3:"why";s:32:"Localhost IP in GET/POST request";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:33:"^(?i:127\.0\.0\.1|localhost|::1)$";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1011;a:4:{s:3:"why";s:24:"Unrestricted file access";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:14:"/uploadify.php";s:3:"ope";i:3;}}}i:1350;a:4:{s:3:"why";s:21:"Arbitrary File Upload";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:30:"/fckeditor/editor/filemanager/";s:3:"ope";i:3;}}}i:1351;a:4:{s:3:"why";s:24:"Unauthorized file access";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:15:"/wp-config.php$";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1352;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:15:"houzez_register";s:3:"ope";i:1;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:9:"POST:role";s:3:"wha";s:56:"^(?:houzez_(?:agency|agent|buyer|seller|owner|manager))$";s:3:"ope";i:6;}}s:3:"cpb";s:14:"manage_options";}i:1353;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:36:"houzez_register_user_with_membership";s:3:"ope";i:1;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:14:"POST:user_role";s:3:"wha";s:56:"^(?:houzez_(?:agency|agent|buyer|seller|owner|manager))$";s:3:"ope";i:6;}}s:3:"cpb";s:14:"manage_options";}i:1354;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:8:"GET:page";s:3:"wha";s:17:"postman_email_log";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:8:"GET:view";s:3:"wha";s:3:"log";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1355;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:10:"pods_admin";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:method";s:3:"wha";s:9:"save_user";s:3:"ope";i:1;}}}i:1356;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:36:"litho_remove_font_family_action_data";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1357;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:32:"alone_import_pack_install_plugin";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1359;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:28:"POST:wpda_role|GET:wpda_role";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:13:"promote_users";}i:1361;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:21:"shortcode_addons_data";s:3:"ope";i:1;}}}i:1363;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:12:"GET:yrc_nuke";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:14:"manage_options";}i:1364;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:19:"GET:yrc_clear_cache";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:14:"manage_options";}i:1365;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"um_get_members";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:12:"POST:sorting";s:3:"wha";s:2:"\W";s:3:"ope";i:5;}}}i:1366;a:4:{s:3:"why";s:24:"Unauthorized file access";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:21:"/wp-admin/install.php";s:3:"ope";i:3;}}}i:1367;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:26:"uielem/v1/prepare_template";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1368;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:11:"wp/v2/posts";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:22:"REQUEST:author_exclude";s:3:"wha";s:6:"[^\d,]";s:3:"ope";i:5;}}s:3:"cpb";s:14:"manage_options";}i:1369;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:13:"GET:post_type";s:3:"wha";s:15:"acf-field-group";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:15:"GET:post_status";s:3:"wha";s:1:""";s:3:"ope";i:3;}}}i:1370;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:20:"REQUEST:form_request";s:3:"wha";s:15:"jssupportticket";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:12:"REQUEST:task";s:3:"wha";s:9:"savetheme";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1371;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"bit_fm_connector";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:11:"REQUEST:cmd";s:3:"wha";s:3:"put";s:3:"ope";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1372;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:22:"mvl_theme_install_base";s:3:"ope";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1374;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"themify_plupload";s:3:"ope";i:1;}}s:3:"cpb";s:12:"upload_files";}i:1375;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:27:"themify_plupload_customizer";s:3:"ope";i:1;}}s:3:"cpb";s:18:"edit_theme_options";}i:1376;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:24:"tbuilder_plupload_layout";s:3:"ope";i:1;}}s:3:"cpb";s:9:"edit_post";}i:1377;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:22:"tb_update_global_style";s:3:"ope";i:1;}}s:3:"cpb";s:9:"edit_post";}i:1378;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"gsf_upload_fonts";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1379;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"POST:option";s:3:"wha";s:23:"mo_wpns_change_password";s:3:"ope";i:1;}}}i:1380;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"save_footer_text";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1385;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:25:"atbdp_plugins_bulk_action";s:3:"ope";i:1;}}}i:1386;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:21:"POST:stm_new_password";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:14:"GET:hash_check";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:14:"manage_options";}i:1399;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:11:"save_config";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:11:"POST:config";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:33:"manage_options|manage_woocommerce";}i:1404;a:4:{s:3:"why";s:11:"WP backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:22:"SERVER:HTTP_USER_AGENT";s:3:"wha";s:12:"wp_is_mobile";s:3:"ope";i:1;}}}i:1410;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"install_requirements";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:11:"POST:plugin";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:14:"manage_options";}i:1414;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:68:"^(antihacker|cardealer|stopbadbots|wpmemory|wptools)_install_plugin$";s:3:"ope";i:5;}}}i:1417;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:28:"/payu/v1/generate-user-token";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:13:"REQUEST:email";s:3:"wha";s:20:"commerce.pro@payu.in";s:3:"ope";i:1;}}}i:1419;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"updraft_central_ajax";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1420;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:11:"POST:format";s:3:"wha";s:1:"1";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:18:"POST:udrpc_message";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1421;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:27:"/frm-admin/v1/install-addon";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:31:"manage_options|activate_plugins";}i:1422;a:4:{s:3:"why";s:25:"Unauthorized file edition";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:22:"GET:action|POST:action";s:3:"wha";s:35:"^(?:update|edit-theme-plugin-file)$";s:3:"ope";i:5;}i:2;a:4:{s:3:"whe";s:9:"POST:file";s:3:"wha";s:27:"^(?:ninjafirewall|nfwplus)/";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1423;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:19:"POST:wcuf_file_name";s:3:"wha";s:4:".php";s:3:"ope";i:3;}}}i:1424;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:19:"do_button_job_later";s:3:"ope";i:1;}}}i:1425;a:4:{s:3:"why";s:10:"Stored XSS";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:11:"POST:author";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:4:{s:3:"whe";s:12:"POST:comment";s:3:"wha";s:121:"<(?i)(?:(?:a|abbr|acronym)\b.+?title|(?:blockquote|q)\b.+?cite|del\b.+?datetime)\s*=\s*['"][^>]+?on[a-z]{3,18}\s*=\s*.+?>";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1426;a:4:{s:3:"why";s:22:"Excessive payload size";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:11:"POST:author";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:12:"POST:comment";s:3:"wha";s:13:"^(?s).{65000}";s:3:"ope";i:5;}}}i:1427;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:29:"/getwid/v1/get_remote_content";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:10:"edit_posts";}i:1428;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:18:"demo_importer_plus";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:19:"REQUEST:demo_action";s:3:"wha";s:12:"do-reinstall";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1429;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:33:"woosea_save_adwords_conversion_id";s:3:"ope";i:1;}}}i:1430;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:82:"^b2bking(?:downloadpricelist|_price_import|rejectuser|approveuser|_approve_order)$";s:3:"ope";i:5;}}s:3:"cpb";s:33:"manage_options|manage_woocommerce";}i:1431;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:22:"wpgmp_temp_access_ajax";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1432;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:23:"fusion_form_submit_ajax";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:13:"POST:formData";s:3:"wha";s:6:"/../..";s:3:"ope";i:3;}}}i:1434;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:47:"SERVER:HTTP_CONTENT_DIR|SERVER:HTTP_CONTENT_ABS";s:3:"wha";s:4:"php:";s:3:"ope";i:4;}}}i:1435;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:31:"wpas_import_product_from_amazon";s:3:"ope";i:1;}}s:3:"cpb";s:6:"import";}i:1437;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:20:"POST:sgpb-is-preview";s:3:"wha";s:1:"1";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:12:"POST:post_ID";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:14:"manage_options";}i:1438;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:18:"GOTMLS_load_update";s:3:"ope";i:1;}}s:3:"cpb";s:16:"activate_plugins";}i:1440;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:34:"user_registration_form_save_action";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1442;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:28:"/hc/v1/install-active-plugin";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1443;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:13:"/enable-cors/";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:18:"HTTP_AUTHORIZATION";s:3:"wha";s:60:"$2y$10$kmjfJ.xWPM5u7l1K0UgdUuu/wYROmfPYR.dISGcN2PMk5EnJNKAmu";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1444;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:29:"REQUEST:_wplogin|REQUEST:_wpm";s:3:"wha";s:7:"^.{32,}";s:3:"ope";i:5;}}}i:1445;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:22:"REQUEST:cstu_set_token";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:13:"REQUEST:token";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1447;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:41:"^wps_ic_save_(?:popup|excludes)_settings$";s:3:"ope";i:5;}}}i:1449;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:26:"^cfp-(?:new-post|connect)$";s:3:"ope";i:5;}}}i:1450;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:20:"REQUEST:kds_password";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:21:"REQUEST:__kds_docImgs";s:3:"wha";s:45:"\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b";s:3:"ope";i:5;}}}i:1451;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:27:"POST:lang_default|POST:lang";s:3:"wha";s:10:"^[\w\d-]+$";s:3:"ope";i:6;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:15:"add_to_wishlist";s:3:"ope";i:1;}}}i:1452;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"wcfm_ajax_controller";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:34:"REQUEST:wcfm_customers_manage_form";s:3:"wha";s:11:"customer_id";s:3:"ope";i:3;}}s:3:"cpb";s:14:"manage_options";}i:1454;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:23:"/hc/v1/themehunk-import";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1455;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:13:"handle_import";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:16:"POST:template_id";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:15:"install_plugins";}i:1456;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:24:"thegem_theme_options_api";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1457;a:4:{s:3:"why";s:20:"Suspicious shortcode";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:21:"parse-media-shortcode";s:3:"ope";i:1;}i:2;a:4:{s:3:"whe";s:14:"POST:shortcode";s:3:"wha";s:39:"^\[(audio|embed|playlist|video|gallery)";s:3:"ope";i:6;s:3:"nor";i:1;}}}i:1458;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"svx_ajax_factory";s:3:"ope";i:1;}}s:3:"cpb";s:18:"manage_woocommerce";}i:1459;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:31:"mk_check_filemanager_php_syntax";s:3:"ope";i:1;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1460;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:27:"/eventin/v2/speakers/import";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:37:"etn_manage_organizer|etn_manage_event";}i:1461;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:31:"/gravitysmtp/v1/tests/mock-data";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:8:"GET:page";s:3:"wha";s:20:"gravitysmtp-settings";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1462;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:38:"bookingpress_save_lite_wizard_settings";s:3:"ope";i:1;}}}i:1463;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:16:"/mcp/v1/messages";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1465;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:20:"REQUEST:gf_api_token";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1468;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:10:"GET:action";s:3:"wha";s:10:"dmm_export";s:3:"ope";i:1;}}}i:1469;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:29:"/api/flutter_user/apple_login";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:21:"SERVER:REQUEST_METHOD";s:3:"wha";s:3:"GET";s:3:"ope";i:1;}}}i:1470;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:16:"wp-trackback.php";s:3:"ope";i:3;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:8:"POST:url";s:3:"wha";s:5:"[,()]";s:3:"ope";i:5;}}}i:1471;a:4:{s:3:"why";s:24:"Unrestricted file access";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:12:"/readme.html";s:3:"ope";i:3;}}}i:1474;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"elementor_ajax";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:15:"REQUEST:actions";s:3:"wha";s:34:"pro_woocommerce_update_page_option";s:3:"ope";i:3;}}s:3:"cpb";s:33:"manage_options|manage_woocommerce";}i:1476;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:26:"sneeit_articles_pagination";s:3:"ope";i:1;}}}i:1477;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:24:"fusion_get_widget_markup";s:3:"ope";i:1;}}s:3:"cpb";s:34:"awb_role_manager_access_capability";}i:1480;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:27:"wpos-analytics/v1/analytics";s:3:"ope";i:4;s:3:"nor";i:1;}}}i:1483;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:39:"GET:switch_user|COOKIE:original_user_id";s:3:"wha";s:3:"^\d";s:3:"ope";i:5;}}}i:1484;a:4:{s:3:"why";s:16:"Suspicious login";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:13:"/wp-login.php";s:3:"ope";i:3;}i:2;a:3:{s:3:"whe";s:8:"POST:log";s:3:"wha";s:122:"^(wpsecuritypatch|wpnew_|server_admin|foxilitrix|system_not_delete_|admin_sweet|AnonymousFox|adminlin|cron-.{40}$)|['"<>;]";s:3:"ope";i:5;}}}i:1485;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:35:"HTTP_X_WCPAY_PLATFORM_CHECKOUT_USER";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1486;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:rp_key";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:24:"/wp-admin/admin-ajax.php";s:3:"ope";i:3;}}}i:1488;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:18:"export_admin_table";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:16:"REQUEST:filename";s:3:"wha";s:6:"\.csv$";s:3:"ope";i:6;}}}i:1489;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:11:"POST:foobar";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:93:"^TotalSoftPoll_(Clone(?:_Set)?|Del(?:_Set)?|Edit(?:_Q_M|_Ans|_Set)?|Theme_(?:Clone|Edit1?)?)$";s:3:"ope";i:5;}}}i:1490;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:45:"GET:edd_action|GET:edd-action|POST:edd-action";s:3:"wha";s:19:"user_reset_password";s:3:"ope";i:1;}}}i:1491;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:16:"REQUEST:security";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"update_options";s:3:"ope";i:1;}}}i:1492;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"htmega_ajax_register";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:13:"POST:reg_role";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1493;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"nf_download_all_subs";s:3:"ope";i:1;}}}i:1494;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:25:"googlesitekit_proxy_setup";s:3:"ope";i:1;}}}i:1495;a:4:{s:3:"why";s:50:"ThemeREX Addons unauthenticated function injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:28:"/trx_addons/v2/get/sc_layout";s:3:"ope";i:4;s:3:"nor";i:1;}}}i:1496;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:30:"/rankmath/v1/updateRedirection";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:22:"REQUEST:redirectionUrl";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1497;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:20:"POST:bbp-forums-role";s:3:"wha";s:13:"bbp_keymaster";s:3:"ope";i:1;}}}i:1498;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:18:"_ning_upload_image";s:3:"ope";i:1;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1499;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:28:"st_filter_tour_ajax_location";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:15:"GET:id_location";s:3:"wha";s:2:"\D";s:3:"ope";i:5;}}}i:1500;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:26:"change_klarna_addon_status";s:3:"ope";i:1;}}}i:1501;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:23:"gdlr_lms_cancel_booking";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:7:"POST:id";s:3:"wha";s:2:"\D";s:3:"ope";i:5;}}}i:1502;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:12:"POST:rm_slug";s:3:"wha";s:12:"rm_user_edit";s:3:"ope";i:1;}}}i:1503;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:81:"^(rm_save_form_view_sett|set_default_form|import_first|rm_admin_upload_template)$";s:3:"ope";i:5;}}}i:1504;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:28:"qsm_upload_image_fd_question";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:10:"FILES:file";s:3:"wha";s:45:"\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b";s:3:"ope";i:5;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1505;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:27:"qsm_remove_file_fd_question";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:13:"POST:file_url";s:3:"wha";s:15:"^qsmfileupload_";s:3:"ope";i:6;}}}i:1506;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:28:"GET:alg_wc_pif_download_file";s:3:"wha";s:7:"\.[\\/]";s:3:"ope";i:5;s:3:"tra";i:3;}}}i:1507;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:35:"kaliforms_form_delete_uploaded_file";s:3:"ope";i:1;}}}i:1508;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:28:"kaliforms_update_option_ajax";s:3:"ope";i:1;}}}i:1509;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:8:"uploader";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:16:"FILES:uploadfile";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1510;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"iconset_uploader";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:16:"FILES:uploadfile";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1511;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:5:"FILES";s:3:"wha";s:45:"\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b";s:3:"ope";i:5;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"wmuUploadFiles";s:3:"ope";i:1;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1512;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:25:"iva_bh_import_ajax_action";s:3:"ope";i:1;}}}i:1513;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"stm_listing_register";s:3:"ope";i:1;}i:2;a:4:{s:3:"whe";s:3:"RAW";s:3:"wha";s:23:""role":"(?!user|agency)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1514;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:16:"/1/api/ulisting-";s:3:"ope";i:3;s:3:"nor";i:1;}i:2;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:163:"/1/api/ulisting-(?:builder/listing-(?:single-layout|type-layout/(?:save_layout|delete-layout)|item-card-layout|single-page)|user/(?:search|role/save)|email|import)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1515;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:26:"GET:listing_id|GET:user_id";s:3:"wha";s:2:"\D";s:3:"ope";i:5;}i:2;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:39:"/1/api/ulisting-page-statistics/listing";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1516;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:25:"backup_guard_importBackup";s:3:"ope";i:1;}}}i:1517;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:133:"POST:ct-ultimate-gdpr-export|POST:ct-ultimate-gdpr-import|POST:ct-ultimate-gdpr-export-services|POST:ct-ultimate-gdpr-import-services";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1518;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:148:"^(?:wpcf7r_migrate_all_forms|wpcf7r_reset_settings|import_from_debug|wpcf7r_extension_update|deactivate_wpcf7r_extension|activate_wpcf7r_extension)$";s:3:"ope";i:5;}}}i:1519;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:33:"ninja_forms_sendwp_remote_install";s:3:"ope";i:1;}}}i:1520;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:33:"^kiwi_social_share_[sg]et_option$";s:3:"ope";i:5;}}}i:1521;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:20:"GET:backup-migration";s:3:"wha";s:13:"PROGRESS_LOGS";s:3:"ope";i:1;}}}i:1522;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:30:"superpwa_splashscreen_uploader";s:3:"ope";i:1;}}}i:1523;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:4:"POST";s:3:"wha";s:27:"\bpagepath=['"]?\.\./\.\./.";s:3:"ope";i:5;}}}i:1524;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:33:"usces_download_system_information";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1525;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:42:"REQUEST:member_action|REQUEST:order_action";s:3:"wha";s:35:"^dl(?:order|product|member)newlist$";s:3:"ope";i:5;}}s:3:"cpb";s:14:"manage_options";}i:1526;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"cn_save_config";s:3:"ope";i:1;}}}i:1527;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:56:"FILES:rp_wcdpd_settings|REQUEST:rp_wcdpd_export_settings";s:3:"wha";s:2:"^.";s:3:"ope";i:5;}}s:3:"cpb";s:15:"manage_rp_wcdpd";}i:1528;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"wmc_bulk_fixed_price";s:3:"ope";i:1;}}s:3:"cpb";s:13:"edit_products";}i:1529;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:20:"REQUEST:wp_automatic";s:3:"wha";s:8:"download";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:8:"GET:link";s:3:"wha";s:55:"httpz://[a-zA-Z0-9]+\.[a-zA-Z0-9]+\.hop\.clickbank\.net";s:3:"ope";i:6;}}}i:1530;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:58:"SERVER:LSCACHE_VARY_VALUE|SERVER:HTTP_X_LSCACHE_VARY_VALUE";s:3:"wha";s:1:"<";s:3:"ope";i:3;}}}i:1531;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:11:"upload_file";s:3:"ope";i:1;}i:2;a:4:{s:3:"whe";s:38:"FILES:bfdc641563b7bdb53a7b7fb0e49cf9f1";s:3:"tmp";s:0:"";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1532;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:16:"POST:social_site";s:3:"wha";s:4:"true";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:24:"POST:user_id_social_site";s:3:"wha";s:2:"^.";s:3:"ope";i:5;}}s:3:"cpb";s:10:"edit_users";}i:1533;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:33:"redux/v1/templates/plugin-install";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1534;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:38:"jobsearch_job_integrations_settin_save";s:3:"ope";i:1;}}}i:1535;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:34:"POST:jobsearch_allocs_setingsubmit";s:3:"wha";s:1:"1";s:3:"ope";i:1;}}}i:1536;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:10:"GET:import";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:8:"GET:page";s:3:"wha";s:10:"301options";s:3:"ope";i:1;}}}i:1537;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"POST:action";s:3:"wha";s:11:"omgf-update";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1538;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:27:"POST:plugin|POST:ajax_nonce";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"install_plugin";s:3:"ope";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1539;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:30:"woo_product_pagination_product";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:20:"REQUEST:templateInfo";s:3:"wha";s:2:"..";s:3:"ope";i:3;}}}i:1540;a:4:{s:3:"why";s:22:"Unauthenticated action";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:19:"duplicator_download";s:3:"ope";i:1;}}}i:1541;a:4:{s:3:"why";s:22:"Unauthenticated action";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:28:"/api/modular-connector/login";s:3:"ope";i:3;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:origin";s:3:"ope";i:1;s:3:"wha";s:2:"mo";}}}i:1543;a:5:{s:3:"why";s:33:"WP vulnerability (CVE-2019-15858)";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:27:"FILES:wbcr_inp_import_files";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1544;a:4:{s:3:"why";s:22:"Unauthenticated action";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:10:"GET:action";s:3:"wha";s:5:"close";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:8:"GET:post";s:3:"wha";s:5:"^\d+$";s:3:"ope";i:5;}}}i:1545;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:43:"/ShortCodeAddonsUltimate/v2/addons_settings";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1546;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:35:"/oxilabtabsultimate/v1/oxi_settings";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1547;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:24:"POST:php_everywhere_code";s:3:"wha";s:5:"<?php";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1548;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"REQUEST:cmb";s:3:"wha";s:4:"user";s:3:"ope";i:1;}}}i:999;a:3:{i:118;i:1;i:123;i:1;i:1422;i:1;}s:7:"dropins";s:8872:"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";}1 20261001.1|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|a:274:{i:1;a:4:{s:3:"why";s:22:"Directory traversal #1";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:45:"GET|COOKIE|HTTP_USER_AGENT|PHP_SELF|PATH_INFO";s:3:"wha";s:26:"(?:\.{2}[\\/]+){2}[a-zA-Z]";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:2;a:4:{s:3:"why";s:32:"ASCII character 0x00 (NULL byte)";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:88:"GET|POST|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER|REQUEST_URI|PHP_SELF|PATH_INFO|FILES";s:3:"wha";s:3:"\x0";s:3:"ope";i:5;s:3:"noc";i:1;}}}i:3;a:4:{s:3:"why";s:20:"Local file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:33:"GET|COOKIE|SERVER:HTTP_USER_AGENT";s:3:"wha";s:29:"\b(?:proc/self/|etc/passwd)\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:4;a:4:{s:3:"why";s:20:"Local file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:4:"POST";s:3:"wha";s:13:"\betc/passwd$";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:5;a:4:{s:3:"why";s:20:"Local file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:33:"GET|COOKIE|SERVER:HTTP_USER_AGENT";s:3:"wha";s:66:"\b(?i)(?:include|require)(?:_once)?\s*.{0,10}\s*sys_get_temp_dir\b";s:3:"ope";i:5;}}}i:6;a:4:{s:3:"why";s:22:"Directory traversal #2";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:4:"POST";s:3:"wha";s:35:"(?:\.{2}[\\/]+){2,}[-\w/\s.]+\.php$";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:7;a:4:{s:3:"why";s:19:"XML External Entity";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:3:"RAW";s:3:"wha";s:51:"<!ENTITY[\s+]+(?:%[\s+]+)?\w+[\s+]+SYSTEM[\s+]+["']";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:8;a:5:{s:3:"why";s:15:"Suspicious file";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:5:"FILES";s:3:"wha";s:45:"\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b";s:3:"ope";i:5;}}s:3:"cpb";s:17:"unfiltered_upload";}i:50;a:4:{s:3:"why";s:21:"Remote file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:24:"GET|POST|HTTP_USER_AGENT";s:3:"wha";s:34:"^(?i:https?|ftp)://.+/[^&/\s@]+\?$";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:51;a:4:{s:3:"why";s:21:"Remote file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:118:"^(?i)https?://(?:(?:[hp]astebin\.com|textbin\.net|gist\.githubusercontent\.com/.+?)/raw|raw\.githubusercontent\.com)/.";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:52;a:4:{s:3:"why";s:21:"Remote file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:26:"GET|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:66:"\b(?i)(?:include|require)(?:_once)?\s*.{0,10}["'](?:https?|ftp)://";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:53;a:4:{s:3:"why";s:21:"Remote file inclusion";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:31:"GET|POST|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:33:"^(?i:ftp)://(?:.+?:.+?\@)?[^/]+/.";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:54;a:4:{s:3:"why";s:28:"Remote code execution (http)";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:31:"GET|POST|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:37:"^(?:curl|wget)\s+.*\b(?i)https?://.+?";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:100;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:60:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES|HTTP_FORWARDED";s:3:"wha";s:107:"<(?i:applet|embed|form|i?frame(?:set)?|i(?:mg|sindex)|link|m(?:eta|arquee)|object|script|textarea)\b.*=.*?>";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:101;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:78:"\W(?:background(-image)?|-moz-binding)\s*:[^}]*?\burl\s*\([^)]+?(https?:)?//\w";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:102;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:32:"GET|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:134:"<.+?(?i)\b(?:href|(?:form)?action|background|code|data|location|name|poster|src|value)\s*=\s*\\?['"]?(?:(?:f|ht)tps?:)?\\?/\\?/\w+\.\w";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:104;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:26:"GET|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:115:"\b(?:alert|confirm|eval|expression|prompt|set(?:Timeout|Interval)|String\s*\.\s*fromCharCode|\.\s*substr)\s*\(.*?\)";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:105;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:26:"GET|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:69:"\bdocument\s*\.\s*(?:body|cookie|domain|location|open|write(?:ln)?)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:106;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:26:"GET|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:36:"\blocation\s*\.\s*(?:href|replace)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:107;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:26:"GET|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:35:"\bwindow\s*\.\s*(?:open|location)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:108;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:13:"(?i)<style\b.";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:109;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:4:"POST";s:3:"wha";s:50:"\beval\s*\(\s*String\s*\.\s*fromCharCode\s*\(\s*\d";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:110;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:45:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:2764:"(?i)<[a-z].+?\bon(?:d(?:e(?:vice(?:(?:orienta|mo)tion|proximity|found|light)|livery(?:success|error)|activate)|r(?:ag(?:e(?:n(?:ter|d)|xit)|(?:gestur|leav)e|start|drop|over)|op)|i(?:s(?:c(?:hargingtimechange|onnect(?:ing|ed))|abled)|aling)|ata(?:setc(?:omplete|hanged)|(?:availabl|chang)e|error)|urationchange|ownloading|blclick)|Moz(?:M(?:agnifyGesture(?:Update|Start)?|ouse(?:PixelScroll|Hittest))|S(?:wipeGesture(?:Update|Start|End)?|crolledAreaChanged)|(?:(?:Press)?TapGestur|BeforeResiz)e|EdgeUI(?:C(?:omplet|ancel)|Start)ed|RotateGesture(?:Update|Start)?|A(?:udioAvailable|fterPaint))|c(?:o(?:m(?:p(?:osition(?:update|start|end)|lete)|mand(?:update)?)|n(?:t(?:rolselect|extmenu)|nect(?:ing|ed))|py)|a(?:(?:llschang|ch)ed|nplay(?:through)?|rdstatechange)|h(?:(?:arging(?:time)?ch)?ange|ecking)|(?:fstate|ell)change|u(?:echange|t)|l(?:ick|ose))|s(?:t(?:a(?:t(?:uschanged|echange)|lled|rt)|k(?:sessione|comma)nd|op)|e(?:ek(?:complete|ing|ed)|(?:lec(?:tstar)?)?t|n(?:ding|t))|(?:peech|ound)(?:start|end)|u(?:ccess|spend|bmit)|croll|how)|m(?:o(?:z(?:(?:pointerlock|fullscreen)(?:change|error)|(?:orientation|time)change|network(?:down|up)load)|use(?:(?:lea|mo)ve|o(?:ver|ut)|enter|wheel|down|up)|ve(?:start|end)?)|essage|ark)|a(?:n(?:imation(?:iteration|start|end)|tennastatechange)|fter(?:(?:scriptexecu|upda)te|print)|udio(?:process|start|end)|d(?:apteradded|dtrack)|ctivate|lerting|bort)|b(?:e(?:fore(?:(?:(?:de)?activa|scriptexecu)te|u(?:nload|pdate)|p(?:aste|rint)|c(?:opy|ut)|editfocus)|gin(?:Event)?)|oun(?:dary|ce)|l(?:ocked|ur)|roadcast|usy)|DOM(?:Node(?:Inserted(?:IntoDocument)?|Removed(?:FromDocument)?)|(?:CharacterData|Subtree)Modified|A(?:ttrModified|ctivate)|Focus(?:Out|In)|MouseScroll)|r(?:e(?:s(?:u(?:m(?:ing|e)|lt)|ize|et)|adystatechange|pea(?:tEven)?t|movetrack|trieving|ceived)|ow(?:s(?:inserted|delete)|e(?:nter|xit))|atechange)|p(?:op(?:up(?:hid(?:den|ing)|show(?:ing|n))|state)|a(?:ge(?:hide|show)|(?:st|us)e|int)|ro(?:pertychange|gress)|lay(?:ing)?)|t(?:ouch(?:(?:lea|mo)ve|en(?:ter|d)|cancel|start)|ransition(?:cancel|end|run)|ime(?:update|out)|ext)|u(?:s(?:erproximity|sdreceived)|p(?:gradeneeded|dateready)|n(?:derflow|load))|f(?:o(?:rm(?:change|input)|cus(?:out|in)?)|i(?:lterchange|nish)|ailed)|l(?:o(?:ad(?:e(?:d(?:meta)?data|nd)|start)|secapture)|evelchange|y)|g(?:amepad(?:(?:dis)?connected|button(?:down|up)|axismove)|et)|e(?:n(?:d(?:Event|ed)?|abled|ter)|rror(?:update)?|mptied|xit)|i(?:cc(?:cardlockerror|infochange)|n(?:coming|valid|put))|o(?:(?:(?:ff|n)lin|bsolet)e|verflow(?:changed)?|pen)|SVG(?:(?:Unl|L)oad|Resize|Scroll|Abort|Error|Zoom)|h(?:e(?:adphoneschange|l[dp])|ashchange|olding)|v(?:o(?:lum|ic)e|ersion)change|w(?:a(?:it|rn)ing|heel)|key(?:press|down|up)|(?:AppComman|Loa)d|no(?:update|match)|Request|zoom)\s*=.+?";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:111;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"POST|RAW";s:3:"wha";s:2767:"(?i)<[a-z].+?\bon(?:d(?:e(?:vice(?:(?:orienta|mo)tion|proximity|found|light)|livery(?:success|error)|activate)|r(?:ag(?:e(?:n(?:ter|d)|xit)|(?:gestur|leav)e|start|drop|over)|op)|i(?:s(?:c(?:hargingtimechange|onnect(?:ing|ed))|abled)|aling)|ata(?:setc(?:omplete|hanged)|(?:availabl|chang)e|error)|urationchange|ownloading|blclick)|Moz(?:M(?:agnifyGesture(?:Update|Start)?|ouse(?:PixelScroll|Hittest))|S(?:wipeGesture(?:Update|Start|End)?|crolledAreaChanged)|(?:(?:Press)?TapGestur|BeforeResiz)e|EdgeUI(?:C(?:omplet|ancel)|Start)ed|RotateGesture(?:Update|Start)?|A(?:udioAvailable|fterPaint))|c(?:o(?:m(?:p(?:osition(?:update|start|end)|lete)|mand(?:update)?)|n(?:t(?:rolselect|extmenu)|nect(?:ing|ed))|py)|a(?:(?:llschang|ch)ed|nplay(?:through)?|rdstatechange)|h(?:(?:arging(?:time)?ch)?ange|ecking)|(?:fstate|ell)change|u(?:echange|t)|l(?:ick|ose))|s(?:t(?:a(?:t(?:uschanged|echange)|lled|rt)|k(?:sessione|comma)nd|op)|e(?:ek(?:complete|ing|ed)|(?:lec(?:tstar)?)?t|n(?:ding|t))|(?:peech|ound)(?:start|end)|u(?:ccess|spend|bmit)|croll|how)|m(?:o(?:z(?:(?:pointerlock|fullscreen)(?:change|error)|(?:orientation|time)change|network(?:down|up)load)|use(?:(?:lea|mo)ve|o(?:ver|ut)|enter|wheel|down|up)|ve(?:start|end)?)|essage|ark)|a(?:n(?:imation(?:iteration|start|end)|tennastatechange)|fter(?:(?:scriptexecu|upda)te|print)|udio(?:process|start|end)|d(?:apteradded|dtrack)|ctivate|lerting|bort)|b(?:e(?:fore(?:(?:(?:de)?activa|scriptexecu)te|u(?:nload|pdate)|p(?:aste|rint)|c(?:opy|ut)|editfocus)|gin(?:Event)?)|oun(?:dary|ce)|l(?:ocked|ur)|roadcast|usy)|DOM(?:Node(?:Inserted(?:IntoDocument)?|Removed(?:FromDocument)?)|(?:CharacterData|Subtree)Modified|A(?:ttrModified|ctivate)|Focus(?:Out|In)|MouseScroll)|r(?:e(?:s(?:u(?:m(?:ing|e)|lt)|ize|et)|adystatechange|pea(?:tEven)?t|movetrack|trieving|ceived)|ow(?:s(?:inserted|delete)|e(?:nter|xit))|atechange)|p(?:op(?:up(?:hid(?:den|ing)|show(?:ing|n))|state)|a(?:ge(?:hide|show)|(?:st|us)e|int)|ro(?:pertychange|gress)|lay(?:ing)?)|t(?:ouch(?:(?:lea|mo)ve|en(?:ter|d)|cancel|start)|ransition(?:cancel|end|run)|ime(?:update|out)|ext)|u(?:s(?:erproximity|sdreceived)|p(?:gradeneeded|dateready)|n(?:derflow|load))|f(?:o(?:rm(?:change|input)|cus(?:out|in)?)|i(?:lterchange|nish)|ailed)|l(?:o(?:ad(?:e(?:d(?:meta)?data|nd)|start)|secapture)|evelchange|y)|g(?:amepad(?:(?:dis)?connected|button(?:down|up)|axismove)|et)|e(?:n(?:d(?:Event|ed)?|abled|ter)|rror(?:update)?|mptied|xit)|i(?:cc(?:cardlockerror|infochange)|n(?:coming|valid|put))|o(?:(?:(?:ff|n)lin|bsolet)e|verflow(?:changed)?|pen)|SVG(?:(?:Unl|L)oad|Resize|Scroll|Abort|Error|Zoom)|h(?:e(?:adphoneschange|l[dp])|ashchange|olding)|v(?:o(?:lum|ic)e|ersion)change|w(?:a(?:it|rn)ing|heel)|key(?:press|down|up)|(?:AppComman|Loa)d|no(?:update|match)|Request|zoom)\s*=\s*.+?";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:112;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:42:"<.+?(?i)[a-z]+\s*=.*?(?:java|vb)script:.+?";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:113;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:4:"POST";s:3:"wha";s:42:"<.+?(?i)[a-z]+\s*=.*?(?:java|vb)script:.+?";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:114;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:64:"QUERY_STRING|GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|REQUEST_URI";s:3:"wha";s:14:"(?i)<script\b.";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:115;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"POST|RAW";s:3:"wha";s:14:"(?i)<script\b.";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:116;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:48:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|RAW";s:3:"wha";s:12:"<x:script\b.";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:117;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:42:"[{}+[\]\s]\+\s*\[\s*]\s*\)\s*\[[{!}+[\]\s]";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:118;a:4:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:38:"\+A(?:Dw|ACIAPgA8)-.+?\+AD4(?:APAAi)?-";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:119;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:43:"POST|GET|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:349:"(?i)[\s"'\x60;,\/0-9=\x0B\x09\x0C(]+on(?:abort|blur|change|click|close|dblclick|dragdrop|endevent|error|exit|focus(?:in|out)?|formchange|form(?:data|input)|input|key(?:down|press|statuschange|up)|load[a-z]{0,10}|(?:mouse|pointer)[a-z]{2,10}|move|move(?:end|start)|reset|resize|noupdate|scroll|select|submit|success|svgload|timeout|unload)\s*[=;,|'"]";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:120;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:29:"(?i)<[a-z]+\\?/[a-z]+.+?=.+?>";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:121;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:67:"\batob\s*(?:['"\x60]\s*\]\s*)?\(\s*(['"\x60])[a-zA-Z0-9/+=]+\1\s*\)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}s:3:"cpb";s:15:"unfiltered_html";}i:122;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:90:"\[\s*\]\s*\[\s*['"\x60]filter['"\x60]\s*\]\s*\[\s*['"\x60]constructor['"\x60]\s*\]\s*\(\s*";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}s:3:"cpb";s:15:"unfiltered_html";}i:123;a:4:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:3:"GET";s:3:"wha";s:44:"\b(?:document|window|this)\s*\[.+?\]\s*[\[(]";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}}i:125;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:19:"GET|HTTP_USER_AGENT";s:3:"wha";s:167:"(?:(?:\b(?:self|this|top|window)\s*\[.+?\]|\(\s*(?:alert|confirm|eval|expression|prompt)\s*\)|\[.*?\]\s*\.\s*find)|(?:\.\s*(?:re(?:ject|place)|constructor)))\s*\(.*?\)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}s:3:"cpb";s:15:"unfiltered_html";}i:126;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:19:"GET|HTTP_USER_AGENT";s:3:"wha";s:73:"\b(\w+)\s*=\s*(?:alert|confirm|eval|expression|prompt)\s*[;,]\1\s*\(.*?\)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}s:3:"cpb";s:15:"unfiltered_html";}i:127;a:5:{s:3:"why";s:20:"Cross-site scripting";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:19:"GET|HTTP_USER_AGENT";s:3:"wha";s:115:"\bFunction\s*[({].*?[})]\s*\(.*?\)|\bfunction\s*\(.+?\)\s*{.+?}|(?:\[|new)\s*class\s*extends\b|\bArray\s*.\s*from\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:2;}}s:3:"cpb";s:15:"unfiltered_html";}i:128;a:5:{s:3:"why";s:22:"Attribute JS injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:51:"POST|GET|SERVER:HTTP_REFERER|SERVER:HTTP_USER_AGENT";s:3:"wha";s:37:"(?i)(?:\W|^)javascript:(?!void\().{8}";s:3:"ope";i:5;s:3:"nor";i:1;}}s:3:"cpb";s:15:"unfiltered_html";}i:150;a:4:{s:3:"why";s:21:"Mail header injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:53:"\x0A\b(?i:(?:reply-)?to|b?cc|content-[td]\w)\s*:.*?\@";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"noc";i:1;}}}i:153;a:4:{s:3:"why";s:21:"SSI command injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:56:"<!--#(?:config|echo|exec|flastmod|fsize|include)\b.+?-->";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:154;a:4:{s:3:"why";s:14:"Code injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:35:"COOKIE|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:31:"(?s:<\?.+)|#!/(?:usr|bin)/.+?\s";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:155;a:4:{s:3:"why";s:14:"Code injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:31:"GET|POST|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:405:"(?:<\?(?![Xx][Mm][Ll]).*?(?:\$_?(?:COOKIE|ENV|FILES|GLOBALS|(?:GE|POS|REQUES)T|SE(RVER|SSION))\s*[=\[)]|\b(?i:array_map|assert|base64_(?:de|en)code|curl_exec|eval|(?:ex|im)plode|file(?:_get_contents)?|fsockopen|function_exists|gzinflate|move_uploaded_file|passthru|[ep]reg_replace|phpinfo|stripslashes|strrev|substr|system|(?:shell_)?exec)\s*(?:/\*.+?\*/\s*)?\())|#!/(?:usr|bin)/.+?\s|\W\$\{\s*['"]\w+['"]";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:156;a:4:{s:3:"why";s:14:"Code injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:31:"GET|POST|COOKIE|HTTP_USER_AGENT";s:3:"wha";s:115:"\b(?i:eval)\s*\(\s*(?i:base64_decode|exec|file_get_contents|gzinflate|passthru|shell_exec|stripslashes|system)\s*\(";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:157;a:4:{s:3:"why";s:14:"Code injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:12:"CONTENT_TYPE";s:3:"wha";s:16:"application/json";s:3:"ope";i:4;}i:2;a:4:{s:3:"whe";s:3:"RAW";s:3:"wha";s:6:"<?php ";s:3:"ope";i:4;s:3:"nor";i:1;}}}i:160;a:4:{s:3:"why";s:40:"Shellshock vulnerability (CVE-2014-6271)";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:10:"GET|SERVER";s:3:"wha";s:16:"^\s*\(\s*\)\s*\{";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:250;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:5:{s:3:"whe";s:14:"GET|POST|FILES";s:3:"wha";s:43:"^[-\d';].+\w.+(?:--[\x00-\x20\x7f]*|#|/\*)$";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"cap";i:1;}i:2;a:3:{s:3:"wha";s:266:"(?i)(?:\b|\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\s+(?:not\s+)?null|limit|load(?:_file)?|order\s+by|password|rename|r?like|select|(?:pg_)?sleep|substring|table|truncate|union|update)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:251;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:49:"(?i)(?:\b|\d)(?:ceil|concat|conv|floor|version)\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"cap";i:1;}i:2;a:3:{s:3:"wha";s:35:"(?i)(?:\b|\d)(?:pi\s*\(.*?\).+?){3}";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:253;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:15:"GET|POST|COOKIE";s:3:"wha";s:43:"^(?i:admin(?:istrator)?)['"].*?(?:--|#|/\*)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:254;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:84:"(?i)\b[-\w]+@(?:[-a-z0-9]+\.)+[a-z]{2,8}'.{0,20}[^a-z](?:\band\b|&&).{0,20}=[\s/*]*'";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:255;a:4:{s:3:"why";s:32:"SQL injection (JSON obfuscation)";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:102:"(?:\band\b|\bor\b|\bhaving\b|&&|\|\|).{0,250}\b(?:(?:\w+)\s*(?:@>|<@)\s*'{"|'{"\s*(?:@>|<@)\s*(?:\w+))";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:256;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:96:"(?:\band\b|\bor\b|\bhaving\b|&&|\|\|)\s*(?:\d+\s*)+(?:[!<]?=|=>?|[<>]|(?:not\s+)?like)(?:\s*\d)+";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:257;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:107:"(?:\band\b|\bor\b|\bhaving\b|&&|[^|]\|\|[^|]).{0,250}\b(\w+)\b\s*(?:[!<]?=|=>?|[<>]|(?:not\s+)?like)\s*\1\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:258;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:15:"GET|POST|SERVER";s:3:"wha";s:65:".{5}\bfrom\b.{1,30}\b(?:information|performance)_schema\s*\.\s*\w";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:259;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:5:{s:3:"whe";s:50:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:53:"^-?\d+.{0,30}(?:\band\b.{0,30})?\b(?i:union|select)\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"cap";i:1;}i:2;a:3:{s:3:"wha";s:261:"(?i)(?:\b|\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\s+(?:not\s+)?null|limit|load(?:_file)?|order\s+by|password|rename|r?like|(?:pg_)?sleep|substring|table|truncate|update|version)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:260;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:50:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|POST|FILES";s:3:"wha";s:63:"^(?:\b(?:null|and|or)\b|\|\||&&)?\s*union\s+(?:all\s+)?select\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:261;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:6:{s:3:"whe";s:44:"GET|HTTP_REFERER|HTTP_USER_AGENT|REQUEST_URI";s:3:"wha";s:52:"(?:\b(?:null|and|or)\b|\|\||&&)\s*.{0,50}\bselect\b.";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;s:3:"cap";i:1;}i:2;a:3:{s:3:"wha";s:267:"(?i)(?:\b|\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\s+(?:not\s+)?null|limit|load(?:_file)?|order\s+by|password|rename|r?like|(?:pg_)?sleep|substring|table|truncate|union|update|version)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:262;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:6:{s:3:"whe";s:45:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:36:"^.{0,10}\bselect\b\s.{1,50}\bfrom\b.";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;s:3:"cap";i:1;}i:2;a:3:{s:3:"wha";s:273:"(?i)(?:\b|\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\s+(?:not\s+)?null|limit|load(?:_file)?|order\s+by|password|rename|r?like|(?:pg_)?sleep|substring|table|truncate|union|update|version|where)\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:263;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:45:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:16:"union all select";s:3:"ope";i:3;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:264;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:13:"select concat";s:3:"ope";i:3;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:265;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:4:"POST";s:3:"wha";s:48:"^.{0,15}\bunion\s+select\b.{1,100}(from|where)\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:267;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:50:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:179:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\balter\s+(?:(?:database|schema)\b|table\s+.{1,70}\s+rename\b|(?:ignore\s+)?table\b|user\b(?:\s+if\s+exists\s)?.{1,38}@).{1,70}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:268;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:187:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\bcreate\s+(?:(?:database|schema|(?:temporary\s+)?table)\s+(?:if\s+not\s+exists\b)?.{1,70}|user\s+.{1,38}@.{1,38}\s+identified\s+by\s+)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:269;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:50:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:186:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\bdrop\s+(?:(?:table\b|index\b.{1,60}\son\b|(?:database|schema)\s+(?:if\s+exists\b)?).{1,70}|user\s+(?:if\s+exists\b)?.{1,38}@.{1,38})";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:270;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:92:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\brename\s+table\s+.{1,70}\s+to\s.{1,70}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:271;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:50:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:151:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\bload\s+data\s+(?:(?:low_priority\s+|concurrent\s+)?local\s+)?infile\b.{1,500}\binto\s+table\b.{2}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:272;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:79:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\btruncate\s+table\s.{1,70}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:273;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:110:"^.{0,30}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,20})?\bselect\b.{1,200}\binto\s+(?:(?:dump|out)file\s|@\w).{10}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:274;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:77:"^.{0,50}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,30})?\bload_file\s+/.{3,15}/\w";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:275;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:44:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:113:"^.{0,50}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,30})?\bdelete\b.{1,100}\bfrom\b.{1,100}\bwhere\b.{1,100}(?:=|null)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:276;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:124:"^.{0,50}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,30})?\bset\s+password\b(?:\s+for\s.{1,38}@.{1,60}=|\s*=.+?\bwhere\s+user\s*=)";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:277;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:74:"(?i)(?:\b|\d)insert\b.+?(?:\b|\d)into\b.{1,150}(?:\b|\d)values\b.*?\(.+?\)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:278;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:86:"^.{0,50}(?:(?:\b(?:and|or|union)\b|\|\||&&).{0,30})?\bupdate\s.{1,100}\bset\s.{1,50}=.";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:279;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:60:"\bgroup\s+\bby\s.{1,200}\bhaving\s.{1,50}(?:[!<]?=|=>?|[<>])";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:280;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:25:"^.{0,10}\border\s+by\s+\d";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:281;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:33:"^.{0,10}\band\s+extractvalue\s+\w";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:282;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:33:"\bbenchmark\s+\d{5,10}\s+[a-z]{2}";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:283;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:36:"\bfloor\s+rand\s+(?:\d+\s*)?\*\s*\d+";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:284;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:30:"\bcase\b.+?\bwhen\b.+?\bthen\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:285;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:29:"^.{0,100}\s(?:pg_)?sleep\s\d+";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:286;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:30:"(?i)\d\s+procedure\s+analyse\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:287;a:4:{s:3:"why";s:13:"SQL injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:59:"waitfor\s+delay\s*\d+(?:\.\d+)?:\d+(?:\.\d+)?:\d+(?:\.\d+)?";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:1;}}}i:300;a:4:{s:3:"why";s:13:"Leading quote";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:3:"GET";s:3:"wha";s:2:"^'";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:301;a:4:{s:3:"why";s:41:"Potential reflected file download attempt";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:31:"(?i)^[^?]*\.(?:bat|cmd)(?:\W|$)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:302;a:4:{s:3:"why";s:12:"PHP variable";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:22:"QUERY_STRING|PATH_INFO";s:3:"wha";s:44:"\bHTTP_RAW_POST_DATA|HTTP_(?:POS|GE)T_VARS\b";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:303;a:4:{s:3:"why";s:18:"phpinfo.php access";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:11:"phpinfo.php";s:3:"ope";i:4;}}}i:304;a:4:{s:3:"why";s:21:"Malformed Host header";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:9:"HTTP_HOST";s:3:"wha";s:20:"[^-a-zA-Z0-9._:\[\]]";s:3:"ope";i:5;}}}i:305;a:4:{s:3:"why";s:23:"PHP handler obfuscation";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:51:"[^/]\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b\.";s:3:"ope";i:5;}}}i:306;a:4:{s:3:"why";s:26:"Bogus user-agent signature";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:22:"SERVER:HTTP_USER_AGENT";s:3:"wha";s:50:"\b(?:compatible; MSIE [1-6]|(?i)Mozilla/[0-3])\.\d";s:3:"ope";i:5;}}}i:307;a:4:{s:3:"why";s:52:"Excessive user-agent string length (400+ characters)";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:15:"HTTP_USER_AGENT";s:3:"wha";s:7:"^.{500}";s:3:"ope";i:5;}}}i:309;a:4:{s:3:"why";s:24:"PHP predefined variables";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:65:"QUERY_STRING|PATH_INFO|COOKIE|SERVER:HTTP_USER_AGENT|HTTP_REFERER";s:3:"wha";s:141:"\b(?:\$?_(COOKIE|ENV|FILES|(?:GE|POS|REQUES)T|SE(RVER|SSION))|HTTP_(?:(?:POST|GET)_VARS|RAW_POST_DATA)|GLOBALS)\s*[=\[)]|\W\$\{\s*['"]\w+['"]";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:310;a:4:{s:3:"why";s:30:"Access to a configuration file";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:15:"SCRIPT_NAME|GET";s:3:"wha";s:81:"\b(?i:(?:conf(?:ig(?:ur(?:e|ation)|\.inc|_global)?)?)|settings?(?:\.?inc)?)\.php$";s:3:"ope";i:5;}}}i:311;a:4:{s:3:"why";s:27:"Large set of Hex characters";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:23:"(?i:\\x[a-f0-9]{2}){25}";s:3:"ope";i:5;}}}i:312;a:4:{s:3:"why";s:16:"Non-compliant IP";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:177:"HTTP_X_FORWARDED_FOR|HTTP_CF_CONNECTING_IP|HTTP_CLIENT_IP|HTTP_FORWARDED_FOR|HTTP_INCAP_CLIENT_IP|HTTP_X_CLUSTER_CLIENT_IP|HTTP_X_FORWARDED|HTTP_X_REAL_IP|HTTP_X_SUCURI_CLIENTIP";s:3:"wha";s:30:"[^.0-9a-fA-F:\x20,unixkow\[\]]";s:3:"ope";i:5;}}}i:313;a:4:{s:3:"why";s:31:"PHP-CGI exploit (CVE-2012-1823)";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:12:"QUERY_STRING";s:3:"wha";s:19:"^-[bcndfiswzT].{20}";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:315;a:4:{s:3:"why";s:13:"Reverse shell";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:81:"GET|HTTP_HOST|SERVER:HTTP_USER_AGENT|QUERY_STRING|SERVER:HTTP_REFERER|HTTP_COOKIE";s:3:"wha";s:61:">.*?/[./]*dev/[./]*(?:tc|ud)p/[./]*[^/]{5,255}/[./]*\d{1,5}\b";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:316;a:4:{s:3:"why";s:13:"Reverse shell";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:81:"GET|HTTP_HOST|SERVER:HTTP_USER_AGENT|QUERY_STRING|SERVER:HTTP_REFERER|HTTP_COOKIE";s:3:"wha";s:72:"\bnc\s+(?:\d+(\.\d+){3}\s+\d+|-\w+\s+(?:\d+|/[\w/]+\s+\d+(\.\d+){3}\s+))";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:317;a:4:{s:3:"why";s:17:"Hidden PHP script";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:53:"/\.[^/]+\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b";s:3:"ope";i:5;}}}i:318;a:4:{s:3:"why";s:15:"Obfuscated data";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:36:"(?i:\bchr\s*\(\s*\d{1,3}\s*\).+?){4}";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:319;a:4:{s:3:"why";s:15:"Obfuscated data";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:5:{s:3:"whe";s:50:"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES";s:3:"wha";s:52:"(?i)concat|select|database|insert|update|union|table";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"cap";i:1;}i:2;a:4:{s:3:"wha";s:75:"\bchar\b\s(?:\d{1,3}\s){3}|(?:\bchar\b\s\d{1,3}\s(?:\|\||or|&&|and)?\s?){3}";s:3:"ope";i:5;s:3:"tra";i:1;s:3:"nor";i:1;}}}i:320;a:4:{s:3:"why";s:15:"Obfuscated data";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:39:"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT";s:3:"wha";s:22:"(?i:\\x[a-f0-9]{2}){4}";s:3:"ope";i:5;}}}i:321;a:4:{s:3:"why";s:14:"Adminer script";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:47:"/_?adminer(?:(?:-\d\.\d.\d)(?:-[\w-]+)?)?\.php$";s:3:"ope";i:5;}}}i:322;a:4:{s:3:"why";s:40:"Attempt to modify NinjaFirewall settings";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:33:"(^|\S['"])nfw_(?:options|rules)\b";s:3:"ope";i:5;}}}i:323;a:4:{s:3:"why";s:13:"Proxy attempt";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:19:"^/%EF%BB%BFhttps?:/";s:3:"ope";i:5;}}}i:351;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:17:"REQUEST:nixpasswd";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:352;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:12:"QUERY_STRING";s:3:"wha";s:16:"\bact=img&img=\w";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:353;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:12:"QUERY_STRING";s:3:"wha";s:15:"\bc=img&name=\w";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:354;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:12:"QUERY_STRING";s:3:"wha";s:36:"^image=(?:arrow|file|folder|smiley)$";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:355;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:6:"COOKIE";s:3:"wha";s:21:"\buname=.+?;\ssysctl=";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:356;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:18:"REQUEST:sql_passwd";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:357;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:12:"POST:nowpath";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:358;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:18:"POST:view_writable";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:359;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:6:"COOKIE";s:3:"wha";s:11:"phpspypass=";s:3:"ope";i:3;s:3:"nor";i:1;}}}i:360;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:6:"POST:a";s:3:"wha";s:90:"^(?:Bruteforce|Console|Files(?:Man|Tools)|Network|Php|SecInfo|SelfRemove|Sql|StringTools)$";s:3:"ope";i:5;}}}i:361;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:12:"POST:nst_cmd";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:362;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:8:"POST:cmd";s:3:"wha";s:206:"^(?:c(?:h_|URL)|db_query|echo\s\\.*|(?:edit|download|save)_file|find(?:_text|\s.+)|ftp_(?:brute|file_(?:down|up))|mail_file|mk|mysql(?:b|_dump)|php_eval|ps\s.*|search_text|safe_dir|sym[1-2]|test[1-8]|zend)$";s:3:"ope";i:5;}}}i:363;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:5:"GET:p";s:3:"wha";s:65:"^(?:chmod|cmd|edit|eval|delete|headers|md5|mysql|phpinfo|rename)$";s:3:"ope";i:5;}}}i:364;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:12:"QUERY_STRING";s:3:"wha";s:137:"^act=(?:bind|cmd|encoder|eval|feedback|ftpquickbrute|gofile|ls|mkdir|mkfile|processes|ps_aux|search|security|sql|tools|update|upload)&d=/";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:365;a:4:{s:3:"why";s:14:"Shell/backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:6:"SERVER";s:3:"wha";s:36:"\b(?i)(eval|base64_decode)\s*\(.+?\)";s:3:"ope";i:5;}}}i:500;a:4:{s:3:"why";s:40:"ASCII control characters (1-8 and 14-31)";s:3:"lev";i:2;s:3:"ena";i:0;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:51:"GET|POST|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER";s:3:"wha";s:20:"[\x01-\x08\x0e-\x1f]";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:510;a:4:{s:3:"why";s:38:"DOCUMENT_ROOT variable in HTTP request";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:5:{s:3:"whe";s:20:"GET|POST|REQUEST_URI";s:3:"wha";s:11:"/nothingyet";s:3:"ope";i:5;s:3:"nor";i:1;s:3:"tra";i:3;}}}i:520;a:4:{s:3:"why";s:31:"Data URI scheme or PHP wrappers";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:58:"GET|POST|COOKIE|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER";s:3:"wha";s:108:"^(?i:(?:expect|file|ph(?:ar|p)|zip)://.|.{0,90}\bdata:(?!image/(?:jpe?g|png|gif|svg\+xml)).*?;\s*base64.*?,)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:525;a:4:{s:3:"why";s:21:"Serialized PHP object";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:51:"GET|POST|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER";s:3:"wha";s:77:"^.{0,25}[;{}]?\b[OC]:\d+:"[a-zA-Z_\x7f-\xff][a-zA-Z0-9_\x7f-\xff]*":\d+:{.*?}";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:531;a:4:{s:3:"why";s:24:"Suspicious bots/scanners";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:15:"HTTP_USER_AGENT";s:3:"wha";s:343:"(?i:acunetix|backdoor|bandit|blackwidow|BOT for JCE|core-project|dts agent|emailmagnet|ex(ploit|tract)|flood|grabber|harvest|httrack|havij|HeadlessChrome|hunter|indy library|LoadTimeBot|mfibot|Microsoft URL Control|Miami Style|morfeus|nessus|NetLyzer|pmafind|scanner|Scrapy|siphon|spbot|sqlmap|survey|teleport|updown_tester|xovibot|zgrap|zmap)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:540;a:4:{s:3:"why";s:32:"Localhost IP in GET/POST request";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:33:"^(?i:127\.0\.0\.1|localhost|::1)$";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1011;a:4:{s:3:"why";s:24:"Unrestricted file access";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:14:"/uploadify.php";s:3:"ope";i:3;}}}i:1350;a:4:{s:3:"why";s:21:"Arbitrary File Upload";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:30:"/fckeditor/editor/filemanager/";s:3:"ope";i:3;}}}i:1351;a:4:{s:3:"why";s:24:"Unauthorized file access";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:8:"GET|POST";s:3:"wha";s:15:"/wp-config.php$";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1352;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:15:"houzez_register";s:3:"ope";i:1;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:9:"POST:role";s:3:"wha";s:56:"^(?:houzez_(?:agency|agent|buyer|seller|owner|manager))$";s:3:"ope";i:6;}}s:3:"cpb";s:14:"manage_options";}i:1353;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:36:"houzez_register_user_with_membership";s:3:"ope";i:1;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:14:"POST:user_role";s:3:"wha";s:56:"^(?:houzez_(?:agency|agent|buyer|seller|owner|manager))$";s:3:"ope";i:6;}}s:3:"cpb";s:14:"manage_options";}i:1354;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:8:"GET:page";s:3:"wha";s:17:"postman_email_log";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:8:"GET:view";s:3:"wha";s:3:"log";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1355;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:10:"pods_admin";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:method";s:3:"wha";s:9:"save_user";s:3:"ope";i:1;}}}i:1356;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:36:"litho_remove_font_family_action_data";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1357;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:32:"alone_import_pack_install_plugin";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1359;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:28:"POST:wpda_role|GET:wpda_role";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:13:"promote_users";}i:1360;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:15:"REQUEST:page_id";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:4:{s:3:"whe";s:16:"REQUEST:pagename";s:3:"wha";s:3:"/..";s:3:"ope";i:3;s:3:"exe";s:9:"urldecode";}}}i:1361;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:21:"shortcode_addons_data";s:3:"ope";i:1;}}}i:1363;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:12:"GET:yrc_nuke";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:14:"manage_options";}i:1364;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:19:"GET:yrc_clear_cache";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:14:"manage_options";}i:1365;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"um_get_members";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:12:"POST:sorting";s:3:"wha";s:2:"\W";s:3:"ope";i:5;}}}i:1366;a:4:{s:3:"why";s:24:"Unauthorized file access";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:21:"/wp-admin/install.php";s:3:"ope";i:3;}}}i:1367;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:26:"uielem/v1/prepare_template";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1368;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:11:"wp/v2/posts";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:22:"REQUEST:author_exclude";s:3:"wha";s:6:"[^\d,]";s:3:"ope";i:5;}}s:3:"cpb";s:14:"manage_options";}i:1369;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:13:"GET:post_type";s:3:"wha";s:15:"acf-field-group";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:15:"GET:post_status";s:3:"wha";s:1:""";s:3:"ope";i:3;}}}i:1370;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:20:"REQUEST:form_request";s:3:"wha";s:15:"jssupportticket";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:12:"REQUEST:task";s:3:"wha";s:9:"savetheme";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1371;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"bit_fm_connector";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:11:"REQUEST:cmd";s:3:"wha";s:3:"put";s:3:"ope";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1372;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:22:"mvl_theme_install_base";s:3:"ope";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1374;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"themify_plupload";s:3:"ope";i:1;}}s:3:"cpb";s:12:"upload_files";}i:1375;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:27:"themify_plupload_customizer";s:3:"ope";i:1;}}s:3:"cpb";s:18:"edit_theme_options";}i:1376;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:24:"tbuilder_plupload_layout";s:3:"ope";i:1;}}s:3:"cpb";s:9:"edit_post";}i:1377;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:22:"tb_update_global_style";s:3:"ope";i:1;}}s:3:"cpb";s:9:"edit_post";}i:1378;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"gsf_upload_fonts";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1379;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"POST:option";s:3:"wha";s:23:"mo_wpns_change_password";s:3:"ope";i:1;}}}i:1380;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"save_footer_text";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1385;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:25:"atbdp_plugins_bulk_action";s:3:"ope";i:1;}}}i:1386;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:21:"POST:stm_new_password";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:14:"GET:hash_check";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:14:"manage_options";}i:1399;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:11:"save_config";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:11:"POST:config";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:33:"manage_options|manage_woocommerce";}i:1404;a:4:{s:3:"why";s:11:"WP backdoor";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:22:"SERVER:HTTP_USER_AGENT";s:3:"wha";s:12:"wp_is_mobile";s:3:"ope";i:1;}}}i:1410;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"install_requirements";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:11:"POST:plugin";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:14:"manage_options";}i:1414;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:68:"^(antihacker|cardealer|stopbadbots|wpmemory|wptools)_install_plugin$";s:3:"ope";i:5;}}}i:1417;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:28:"/payu/v1/generate-user-token";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:13:"REQUEST:email";s:3:"wha";s:20:"commerce.pro@payu.in";s:3:"ope";i:1;}}}i:1419;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"updraft_central_ajax";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1420;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:11:"POST:format";s:3:"wha";s:1:"1";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:18:"POST:udrpc_message";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1421;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:27:"/frm-admin/v1/install-addon";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:31:"manage_options|activate_plugins";}i:1422;a:4:{s:3:"why";s:25:"Unauthorized file edition";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:22:"GET:action|POST:action";s:3:"wha";s:35:"^(?:update|edit-theme-plugin-file)$";s:3:"ope";i:5;}i:2;a:4:{s:3:"whe";s:9:"POST:file";s:3:"wha";s:27:"^(?:ninjafirewall|nfwplus)/";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1423;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:19:"POST:wcuf_file_name";s:3:"wha";s:4:".php";s:3:"ope";i:3;}}}i:1424;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:19:"do_button_job_later";s:3:"ope";i:1;}}}i:1425;a:4:{s:3:"why";s:10:"Stored XSS";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:11:"POST:author";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:4:{s:3:"whe";s:12:"POST:comment";s:3:"wha";s:121:"<(?i)(?:(?:a|abbr|acronym)\b.+?title|(?:blockquote|q)\b.+?cite|del\b.+?datetime)\s*=\s*['"][^>]+?on[a-z]{3,18}\s*=\s*.+?>";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1426;a:4:{s:3:"why";s:22:"Excessive payload size";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:11:"POST:author";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:12:"POST:comment";s:3:"wha";s:13:"^(?s).{65000}";s:3:"ope";i:5;}}}i:1427;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:29:"/getwid/v1/get_remote_content";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:10:"edit_posts";}i:1428;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:18:"demo_importer_plus";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:19:"REQUEST:demo_action";s:3:"wha";s:12:"do-reinstall";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1429;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:33:"woosea_save_adwords_conversion_id";s:3:"ope";i:1;}}}i:1430;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:82:"^b2bking(?:downloadpricelist|_price_import|rejectuser|approveuser|_approve_order)$";s:3:"ope";i:5;}}s:3:"cpb";s:33:"manage_options|manage_woocommerce";}i:1431;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:22:"wpgmp_temp_access_ajax";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1432;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:23:"fusion_form_submit_ajax";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:13:"POST:formData";s:3:"wha";s:6:"/../..";s:3:"ope";i:3;}}}i:1434;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:47:"SERVER:HTTP_CONTENT_DIR|SERVER:HTTP_CONTENT_ABS";s:3:"wha";s:4:"php:";s:3:"ope";i:4;}}}i:1435;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:31:"wpas_import_product_from_amazon";s:3:"ope";i:1;}}s:3:"cpb";s:6:"import";}i:1437;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:20:"POST:sgpb-is-preview";s:3:"wha";s:1:"1";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:12:"POST:post_ID";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:14:"manage_options";}i:1438;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:18:"GOTMLS_load_update";s:3:"ope";i:1;}}s:3:"cpb";s:16:"activate_plugins";}i:1440;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:34:"user_registration_form_save_action";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1442;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:28:"/hc/v1/install-active-plugin";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1443;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:13:"/enable-cors/";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:18:"HTTP_AUTHORIZATION";s:3:"wha";s:60:"$2y$10$kmjfJ.xWPM5u7l1K0UgdUuu/wYROmfPYR.dISGcN2PMk5EnJNKAmu";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1444;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:29:"REQUEST:_wplogin|REQUEST:_wpm";s:3:"wha";s:7:"^.{32,}";s:3:"ope";i:5;}}}i:1445;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:22:"REQUEST:cstu_set_token";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:13:"REQUEST:token";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1447;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:41:"^wps_ic_save_(?:popup|excludes)_settings$";s:3:"ope";i:5;}}}i:1449;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:26:"^cfp-(?:new-post|connect)$";s:3:"ope";i:5;}}}i:1450;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:20:"REQUEST:kds_password";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:21:"REQUEST:__kds_docImgs";s:3:"wha";s:45:"\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b";s:3:"ope";i:5;}}}i:1451;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:27:"POST:lang_default|POST:lang";s:3:"wha";s:10:"^[\w\d-]+$";s:3:"ope";i:6;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:15:"add_to_wishlist";s:3:"ope";i:1;}}}i:1452;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"wcfm_ajax_controller";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:34:"REQUEST:wcfm_customers_manage_form";s:3:"wha";s:11:"customer_id";s:3:"ope";i:3;}}s:3:"cpb";s:14:"manage_options";}i:1454;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:23:"/hc/v1/themehunk-import";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1455;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:13:"handle_import";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:16:"POST:template_id";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:15:"install_plugins";}i:1456;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:24:"thegem_theme_options_api";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1457;a:4:{s:3:"why";s:20:"Suspicious shortcode";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:21:"parse-media-shortcode";s:3:"ope";i:1;}i:2;a:4:{s:3:"whe";s:14:"POST:shortcode";s:3:"wha";s:39:"^\[(audio|embed|playlist|video|gallery)";s:3:"ope";i:6;s:3:"nor";i:1;}}}i:1458;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"svx_ajax_factory";s:3:"ope";i:1;}}s:3:"cpb";s:18:"manage_woocommerce";}i:1459;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:31:"mk_check_filemanager_php_syntax";s:3:"ope";i:1;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1460;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:27:"/eventin/v2/speakers/import";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:37:"etn_manage_organizer|etn_manage_event";}i:1461;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:31:"/gravitysmtp/v1/tests/mock-data";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:8:"GET:page";s:3:"wha";s:20:"gravitysmtp-settings";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1462;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:38:"bookingpress_save_lite_wizard_settings";s:3:"ope";i:1;}}}i:1463;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:16:"/mcp/v1/messages";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1465;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:20:"REQUEST:gf_api_token";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1468;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:10:"GET:action";s:3:"wha";s:10:"dmm_export";s:3:"ope";i:1;}}}i:1469;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:29:"/api/flutter_user/apple_login";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:21:"SERVER:REQUEST_METHOD";s:3:"wha";s:3:"GET";s:3:"ope";i:1;}}}i:1470;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:16:"wp-trackback.php";s:3:"ope";i:3;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:8:"POST:url";s:3:"wha";s:5:"[,()]";s:3:"ope";i:5;}}}i:1471;a:4:{s:3:"why";s:24:"Unrestricted file access";s:3:"lev";i:1;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:12:"/readme.html";s:3:"ope";i:3;}}}i:1474;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"elementor_ajax";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:15:"REQUEST:actions";s:3:"wha";s:34:"pro_woocommerce_update_page_option";s:3:"ope";i:3;}}s:3:"cpb";s:33:"manage_options|manage_woocommerce";}i:1476;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:26:"sneeit_articles_pagination";s:3:"ope";i:1;}}}i:1477;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:24:"fusion_get_widget_markup";s:3:"ope";i:1;}}s:3:"cpb";s:34:"awb_role_manager_access_capability";}i:1480;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:27:"wpos-analytics/v1/analytics";s:3:"ope";i:4;s:3:"nor";i:1;}}}i:1483;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:39:"GET:switch_user|COOKIE:original_user_id";s:3:"wha";s:3:"^\d";s:3:"ope";i:5;}}}i:1484;a:4:{s:3:"why";s:16:"Suspicious login";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:13:"/wp-login.php";s:3:"ope";i:3;}i:2;a:3:{s:3:"whe";s:8:"POST:log";s:3:"wha";s:122:"^(wpsecuritypatch|wpnew_|server_admin|foxilitrix|system_not_delete_|admin_sweet|AnonymousFox|adminlin|cron-.{40}$)|['"<>;]";s:3:"ope";i:5;}}}i:1485;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:35:"HTTP_X_WCPAY_PLATFORM_CHECKOUT_USER";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1486;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:rp_key";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:11:"SCRIPT_NAME";s:3:"wha";s:24:"/wp-admin/admin-ajax.php";s:3:"ope";i:3;}}}i:1489;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:11:"POST:foobar";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:93:"^TotalSoftPoll_(Clone(?:_Set)?|Del(?:_Set)?|Edit(?:_Q_M|_Ans|_Set)?|Theme_(?:Clone|Edit1?)?)$";s:3:"ope";i:5;}}}i:1490;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:45:"GET:edd_action|GET:edd-action|POST:edd-action";s:3:"wha";s:19:"user_reset_password";s:3:"ope";i:1;}}}i:1491;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:16:"REQUEST:security";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"update_options";s:3:"ope";i:1;}}}i:1492;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"htmega_ajax_register";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:13:"POST:reg_role";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1493;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"nf_download_all_subs";s:3:"ope";i:1;}}}i:1494;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:25:"googlesitekit_proxy_setup";s:3:"ope";i:1;}}}i:1495;a:4:{s:3:"why";s:50:"ThemeREX Addons unauthenticated function injection";s:3:"lev";i:2;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:28:"/trx_addons/v2/get/sc_layout";s:3:"ope";i:4;s:3:"nor";i:1;}}}i:1496;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:30:"/rankmath/v1/updateRedirection";s:3:"ope";i:4;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:22:"REQUEST:redirectionUrl";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1497;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:20:"POST:bbp-forums-role";s:3:"wha";s:13:"bbp_keymaster";s:3:"ope";i:1;}}}i:1498;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:18:"_ning_upload_image";s:3:"ope";i:1;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1499;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:28:"st_filter_tour_ajax_location";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:15:"GET:id_location";s:3:"wha";s:2:"\D";s:3:"ope";i:5;}}}i:1500;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:26:"change_klarna_addon_status";s:3:"ope";i:1;}}}i:1501;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:23:"gdlr_lms_cancel_booking";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:7:"POST:id";s:3:"wha";s:2:"\D";s:3:"ope";i:5;}}}i:1502;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:12:"POST:rm_slug";s:3:"wha";s:12:"rm_user_edit";s:3:"ope";i:1;}}}i:1503;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:81:"^(rm_save_form_view_sett|set_default_form|import_first|rm_admin_upload_template)$";s:3:"ope";i:5;}}}i:1504;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:28:"qsm_upload_image_fd_question";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:10:"FILES:file";s:3:"wha";s:45:"\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b";s:3:"ope";i:5;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1505;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:27:"qsm_remove_file_fd_question";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:13:"POST:file_url";s:3:"wha";s:15:"^qsmfileupload_";s:3:"ope";i:6;}}}i:1506;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:28:"GET:alg_wc_pif_download_file";s:3:"wha";s:7:"\.[\\/]";s:3:"ope";i:5;s:3:"tra";i:3;}}}i:1507;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:35:"kaliforms_form_delete_uploaded_file";s:3:"ope";i:1;}}}i:1508;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:28:"kaliforms_update_option_ajax";s:3:"ope";i:1;}}}i:1509;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:8:"uploader";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:16:"FILES:uploadfile";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1510;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:16:"iconset_uploader";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:16:"FILES:uploadfile";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1511;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:5:"FILES";s:3:"wha";s:45:"\.(?:ph(?:p([34x7]|5\d?)?|t(ml)?|ar)|html?)\b";s:3:"ope";i:5;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"wmuUploadFiles";s:3:"ope";i:1;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1512;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:25:"iva_bh_import_ajax_action";s:3:"ope";i:1;}}}i:1513;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"stm_listing_register";s:3:"ope";i:1;}i:2;a:4:{s:3:"whe";s:3:"RAW";s:3:"wha";s:23:""role":"(?!user|agency)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1514;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:16:"/1/api/ulisting-";s:3:"ope";i:3;s:3:"nor";i:1;}i:2;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:163:"/1/api/ulisting-(?:builder/listing-(?:single-layout|type-layout/(?:save_layout|delete-layout)|item-card-layout|single-page)|user/(?:search|role/save)|email|import)";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1515;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:26:"GET:listing_id|GET:user_id";s:3:"wha";s:2:"\D";s:3:"ope";i:5;}i:2;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:39:"/1/api/ulisting-page-statistics/listing";s:3:"ope";i:5;s:3:"nor";i:1;}}}i:1516;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:25:"backup_guard_importBackup";s:3:"ope";i:1;}}}i:1517;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:133:"POST:ct-ultimate-gdpr-export|POST:ct-ultimate-gdpr-import|POST:ct-ultimate-gdpr-export-services|POST:ct-ultimate-gdpr-import-services";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1518;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:148:"^(?:wpcf7r_migrate_all_forms|wpcf7r_reset_settings|import_from_debug|wpcf7r_extension_update|deactivate_wpcf7r_extension|activate_wpcf7r_extension)$";s:3:"ope";i:5;}}}i:1519;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:33:"ninja_forms_sendwp_remote_install";s:3:"ope";i:1;}}}i:1520;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:33:"^kiwi_social_share_[sg]et_option$";s:3:"ope";i:5;}}}i:1521;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:20:"GET:backup-migration";s:3:"wha";s:13:"PROGRESS_LOGS";s:3:"ope";i:1;}}}i:1522;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:30:"superpwa_splashscreen_uploader";s:3:"ope";i:1;}}}i:1523;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:4:"POST";s:3:"wha";s:27:"\bpagepath=['"]?\.\./\.\./.";s:3:"ope";i:5;}}}i:1524;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:33:"usces_download_system_information";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1525;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:42:"REQUEST:member_action|REQUEST:order_action";s:3:"wha";s:35:"^dl(?:order|product|member)newlist$";s:3:"ope";i:5;}}s:3:"cpb";s:14:"manage_options";}i:1526;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"cn_save_config";s:3:"ope";i:1;}}}i:1527;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:56:"FILES:rp_wcdpd_settings|REQUEST:rp_wcdpd_export_settings";s:3:"wha";s:2:"^.";s:3:"ope";i:5;}}s:3:"cpb";s:15:"manage_rp_wcdpd";}i:1528;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:20:"wmc_bulk_fixed_price";s:3:"ope";i:1;}}s:3:"cpb";s:13:"edit_products";}i:1529;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:20:"REQUEST:wp_automatic";s:3:"wha";s:8:"download";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:8:"GET:link";s:3:"wha";s:55:"httpz://[a-zA-Z0-9]+\.[a-zA-Z0-9]+\.hop\.clickbank\.net";s:3:"ope";i:6;}}}i:1530;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:58:"SERVER:LSCACHE_VARY_VALUE|SERVER:HTTP_X_LSCACHE_VARY_VALUE";s:3:"wha";s:1:"<";s:3:"ope";i:3;}}}i:1531;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:11:"upload_file";s:3:"ope";i:1;}i:2;a:4:{s:3:"whe";s:38:"FILES:bfdc641563b7bdb53a7b7fb0e49cf9f1";s:3:"tmp";s:0:"";s:3:"wha";s:0:"";s:3:"ope";i:7;}}}i:1532;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:16:"POST:social_site";s:3:"wha";s:4:"true";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:24:"POST:user_id_social_site";s:3:"wha";s:2:"^.";s:3:"ope";i:5;}}s:3:"cpb";s:10:"edit_users";}i:1533;a:5:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:33:"redux/v1/templates/plugin-install";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1534;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:38:"jobsearch_job_integrations_settin_save";s:3:"ope";i:1;}}}i:1535;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:34:"POST:jobsearch_allocs_setingsubmit";s:3:"wha";s:1:"1";s:3:"ope";i:1;}}}i:1536;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:10:"GET:import";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:8:"GET:page";s:3:"wha";s:10:"301options";s:3:"ope";i:1;}}}i:1537;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"POST:action";s:3:"wha";s:11:"omgf-update";s:3:"ope";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1538;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:27:"POST:plugin|POST:ajax_nonce";s:3:"wha";s:0:"";s:3:"ope";i:7;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:14:"install_plugin";s:3:"ope";i:1;}}s:3:"cpb";s:15:"install_plugins";}i:1539;a:4:{s:3:"why";s:16:"WP vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:30:"woo_product_pagination_product";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:20:"REQUEST:templateInfo";s:3:"wha";s:2:"..";s:3:"ope";i:3;}}}i:1540;a:4:{s:3:"why";s:22:"Unauthenticated action";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:14:"REQUEST:action";s:3:"wha";s:19:"duplicator_download";s:3:"ope";i:1;}}}i:1541;a:4:{s:3:"why";s:22:"Unauthenticated action";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:4:{s:3:"whe";s:11:"REQUEST_URI";s:3:"wha";s:28:"/api/modular-connector/login";s:3:"ope";i:3;s:3:"nor";i:1;}i:2;a:3:{s:3:"whe";s:14:"REQUEST:origin";s:3:"ope";i:1;s:3:"wha";s:2:"mo";}}}i:1543;a:5:{s:3:"why";s:33:"WP vulnerability (CVE-2019-15858)";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:27:"FILES:wbcr_inp_import_files";s:3:"wha";s:0:"";s:3:"ope";i:7;}}s:3:"cpb";s:17:"unfiltered_upload";}i:1544;a:4:{s:3:"why";s:22:"Unauthenticated action";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:2:{i:1;a:3:{s:3:"whe";s:10:"GET:action";s:3:"wha";s:5:"close";s:3:"ope";i:1;}i:2;a:3:{s:3:"whe";s:8:"GET:post";s:3:"wha";s:5:"^\d+$";s:3:"ope";i:5;}}}i:1545;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:43:"/ShortCodeAddonsUltimate/v2/addons_settings";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1546;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:30:"REQUEST_URI|REQUEST:rest_route";s:3:"wha";s:35:"/oxilabtabsultimate/v1/oxi_settings";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1547;a:5:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:4:{s:3:"whe";s:24:"POST:php_everywhere_code";s:3:"wha";s:5:"<?php";s:3:"ope";i:4;s:3:"nor";i:1;}}s:3:"cpb";s:14:"manage_options";}i:1548;a:4:{s:3:"why";s:16:"WP Vulnerability";s:3:"lev";i:3;s:3:"ena";i:1;s:3:"cha";a:1:{i:1;a:3:{s:3:"whe";s:11:"REQUEST:cmb";s:3:"wha";s:4:"user";s:3:"ope";i:1;}}}i:999;a:3:{i:118;i:1;i:123;i:1;i:1422;i:1;}s:7:"dropins";s:8872:"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";} -
ninjafirewall/updates/version3.txt
r3706976 r3730571 1 3|2026 0915.11 3|20261001.1
Note:
See TracChangeset
for help on using the changeset viewer.
