Deny Rule Group – (default) UNIX Command Injection in Parameter Value

UNIXCMD_PARAM_VALUE

  • The group contains deny rules preventing UNIX command injections through HTTP parameter values.

Included Deny Rules

Rule name

Basic

Standard

Strict

(default UNIX_001a) Bash command injection exploiting Shellshock bug in parameter value

Icon - ON

Icon - ON

Icon - ON

(default UNIX_005a) UNIX command injection in quoted context in parameter value (does not block unknown top-level UNIX directory names)

Icon - ON

Icon - ON

(default UNIX_006a) UNIX command injection in quoted context (strict) in parameter value

Icon - ON

(default UNIX_010a) UNIX command injection in unquoted context in parameter value

Icon - ON