Gelsemium 解析

IOB - Indicator of Behavior (266)

タイムライン

言語

en136
pt56
zh38
de10
es8

国・地域

us232
cn32
jp2

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

PHP16
Mapos4
Virtual Programming VP-ASP4
SourceCodester Medical Certificate Generator App4
phpbb-Auction4

脆弱性

#脆弱性BaseTemp0day本日修復CTIEPSSCVE
1Ecommerce Online Store Kit shop.php SQLインジェクション9.89.4$0-$5k$0-$5kNot DefinedOfficial Fix0.020.03763CVE-2004-0300
2PayPal PHP Toolkit Web Services ipn_success.txt 情報の漏洩5.14.8$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00042CVE-2006-0202
3Virtual Programming VP-ASP shopexd.asp SQLインジェクション7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.030.00145CVE-2003-0560
4ZCMS ThinkPHP SQLインジェクション6.36.1$0-$5k$0-$5kNot DefinedNot Defined0.020.00209CVE-2020-19705
5phpBB install.php 特権昇格5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.040.00642CVE-2002-1707
6Pilotgroup eLMS Pro subscribe.php クロスサイトスクリプティング4.34.3$0-$5k$0-$5kHighUnavailable0.020.00220CVE-2010-2356
7SourceCodester Zoo Management System animals.php SQLインジェクション7.57.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.030.00425CVE-2022-2803
8oretnom23 Online Pet Shop We App SQLインジェクション5.95.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00072CVE-2022-40935
9EyouCMS Payment shop.php 特権昇格5.55.3$0-$5k$0-$5kNot DefinedNot Defined0.000.00115CVE-2022-26273
10Discuz UCenter Home shop.php SQLインジェクション7.37.1$0-$5k$0-$5kHighUnavailable0.000.00064CVE-2010-4912
11dream4 Koobi index.php SQLインジェクション7.37.1$0-$5k$0-$5kHighUnavailable0.000.00342CVE-2008-2036
12PHP GD Graphics Library gd_gif_in.c imagecreatefromstring サービス拒否5.45.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.00238CVE-2018-5711
13Gradle PHP Key 特権昇格6.86.8$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00210CVE-2023-26053
14Active Web Softwares eWebquiz questions.asp SQLインジェクション7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00064CVE-2009-4436
15SourceCodester Online Tours & Travels Management System payment_operation.php SQLインジェクション7.57.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.060.00148CVE-2023-0570
16Comdev Comdev News Publisher home.news.php SQLインジェクション7.37.3$0-$5k計算中HighUnavailable0.000.00064CVE-2008-1872
17SimplePHPscripts Classified Ads Script HTTP POST Request user.php クロスサイトスクリプティング4.44.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.090.00052CVE-2023-3465
18PHPUnit HTTP POST eval-stdin.php 特権昇格8.58.4$0-$5k$0-$5kNot DefinedOfficial Fix0.050.97477CVE-2017-9841
19Mapos Permissoes.php クロスサイトスクリプティング4.84.7$0-$5k$0-$5kNot DefinedOfficial Fix0.040.00096CVE-2022-48326
20Aj Square Ajauction subcat.php SQLインジェクション7.37.3$0-$5k$0-$5kHighUnavailable0.030.00821CVE-2007-1298

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (13)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (306)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File/+CSCOE+/logon.htmlpredictive
2File/action.phppredictive
3File/admin/edit.phppredictive
4File/admin/index.phppredictive
5File/admin/login.phppredictive
6File/admin/maintenance/brand.phppredictive
7File/admin/operations/tax.phppredictive
8File/admin/payment.phppredictive
9File/admin/search-result.phppredictive
10File/Applications/Content%20Manager/Execute.aspx?cmd=convert&mode=HTMLpredictive
11File/carbon/mediation_secure_vault/properties/ajaxprocessor.jsppredictive
12File/dipam/athlete-profile.phppredictive
13File/downloadpredictive
14File/fastfood/purchase.phppredictive
15File/FundRaiserEditor.phppredictive
16File/homeaction.phppredictive
17File/index.php?page=category_listpredictive
18File/librarian/bookdetails.phppredictive
19File/mkshop/Men/profile.phppredictive
20File/Moosikay/order.phppredictive
21File/multi-vendor-shopping-script/product-list.phppredictive
22File/OA_HTML/cabo/jsps/a.jsppredictive
23File/opac/Actions.php?a=loginpredictive
24File/pages/animals.phppredictive
25File/pet_shop/classes/Master.php?f=delete_categorypredictive
26File/public/login.htmpredictive
27File/templates/ajax/pager.phppredictive
28File/UserSelfServiceSettings.jsppredictive
29File/vendor/htmlawed/htmlawed/htmLawedTest.phppredictive
30File/VPortal/mgtconsole/GroupCopy.jsppredictive
31File/WebCM/Applications/Reports/index.jsppredictive
32Fileaccount.asppredictive
33Fileaccountmanagement.phppredictive
34Fileaction-visitor.phppredictive
35Fileaction.asppredictive
36Fileaction.phppredictive
37Fileactions.phppredictive
38Filexxxxxxx.xxxpredictive
39Filexxxxxxxxx/xxxxxx/xxxxx.xxxpredictive
40Filexxxxx.xxxpredictive
41Filexxxxx/xxxx-xxxx.xxxpredictive
42Filexxxxx/xxxxx.xxx?xxxx=xxxx&xxxxxx=xxxxpredictive
43Filexxxxx/xxxxx.xxx?xxxx=xxxx&xxxx=xxxxxx&xxxxxx=xxxxpredictive
44Filexxxxx/xxxxxx-xxxx.xxxpredictive
45Filexxxxx/x_xxxxx.xxxpredictive
46Filexxxxx_xxxxxx.xxxpredictive
47Filexxxxxxxxxxxxx.xxxpredictive
48Filexxx.xxxpredictive
49Filexxxxxxxxxxxxx.xxxxx.xxxpredictive
50Filexxxxxxxxxxx/xxxxxxxxxxx/xxxxxxxx/xxxxxxxxx.xxxpredictive
51Filexxxxxxxxxxx/xxxxxxxxxxx/xxxxx.xxxpredictive
52Filexxxxxxxxxxx/xxxxxxxxxxx/xxxxxxxxxx.xxxpredictive
53Filexxx.xxxpredictive
54Filexxxxxx/xxx/xxxxxxxx.xxxpredictive
55Filexxxxxxx_xxxxx.xxxpredictive
56Filexxxxxxx_xxxxxx.xxxpredictive
57Filexxxxxxx.xxxpredictive
58Filexxxxxxx.xxxpredictive
59Filexxxxxx/xxxxx/xxxxx.xxxpredictive
60Filexxxx.xxxpredictive
61Filexxxx.xxxpredictive
62Filexxxxxxx.xxxpredictive
63Filexxxxxxx/xxxxxx.xxxpredictive
64Filexxxxxxxxxx\xxxx.xxxpredictive
65Filexxxx_xxxxx.xxxpredictive
66Filexxxxxxxx.xxxpredictive
67Filexxxxxxx.xxxpredictive
68Filexxxxxx_xxxx_xxxxx.xxxpredictive
69Filexxxxxxxxxx.xxxpredictive
70Filexxxxx_xxxx.xxxpredictive
71Filexxxxxxxxx/xxxxxxx/xxxxx.xxxpredictive
72Filexxxx-xxxx.xxxpredictive
73Filexxxxxxxxxxxxxxxxxxxxxxx.xxxpredictive
74Filexxxxxxxxxxx.xxxpredictive
75Filexxxxxxxx/xxxx/xxxx/xxxxxxxxxx.xxxxpredictive
76Filexxx/xxxx/xxx.xpredictive
77Filexxx/xxxx/xxx_xxxx.xpredictive
78Filexxx/xxxxxxxx/xxx_xxxxxxxxxxxx.xpredictive
79Filexxx.xxxpredictive
80Filexxxxxxxx/xxxxxxx.xxxpredictive
81Filexx_xxx_xx.xpredictive
82Filexxxxxxxxx.xxxpredictive
83Filexxxxx_xxxxx.xxxpredictive
84Filexxxxxxxxx.xxxpredictive
85Filexxxxxxxxxx.xxxpredictive
86Filexxxx.xxxx.xxxpredictive
87Filexxxxxxxxxxxx.xxxpredictive
88Filexxxxxxx.xxxpredictive
89Filexxxxxxx/xxxxx.xxxpredictive
90Filexxxxx.xxxpredictive
91Filexxxxx.xxxpredictive
92Filexxxxx.xxx?x=xxxx&x=xxxxxxx&x=xxxpredictive
93Filexxxxxx-xxxxxxx.xxxpredictive
94Filexxxxxxx.xxxpredictive
95Filexxx/xxxx/xxx_xxxxxxx.xxxpredictive
96Filexxxxx/xxxx.xxxpredictive
97Filexxxx_xxxxxxx.xxxpredictive
98Filexxxx.xxxpredictive
99Filexxxxx/xxxxxx/xxxxxxxxxx.xxxpredictive
100Filexxxxx.xxxpredictive
101Filexxxxx.xxxpredictive
102Filexxxx.xxxpredictive
103Filexxxx.xxxpredictive
104Filexxxx/xxx_xxxx_xxxxxxxxx_xxxx.xpredictive
105Filexxxxxxxx.xxxpredictive
106Filexxxxxxx.xxxpredictive
107Filexxxxxxx/xxxxxxxxxxx/xxxxx/xxxxx.xxxpredictive
108Filexxxxxxx/xxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxxxpredictive
109Filexxxxxxx/xxx_xxxxxxxx.xxxpredictive
110Filexxxxxxxxxxxxx.xxxxx.xxxpredictive
111Filexxxx.xxxpredictive
112Filexxxx.xxxpredictive
113Filexxxxxxxxxxx.xxxpredictive
114Filexxxx/xxxxxxx/xxxxx.xxxpredictive
115Filexxxxxxxxx/xxxxxx-xxx-xx.x:x.x.xpredictive
116Filexxxxxxx.xxxpredictive
117Filexxxxxxxx.xxxpredictive
118Filexxxxx.xxxpredictive
119Filexxxxxxxxx.xxx.xxxpredictive
120Filexxxxx_xxx.xxxpredictive
121Filexxxxx.xxxpredictive
122Filexxxxxxx.xxxpredictive
123Filexxxxxxx/xxxx.xxxpredictive
124Filexxxxxxx_xxxxxxx.xxxpredictive
125Filexxxxxxxxx.xxxpredictive
126Filexxxxxxxxx.xxxpredictive
127Filexxxx.xxxpredictive
128Filexxxxxx_xxxxxx.xxxpredictive
129Filexxxx/xxxxxxxxxxxxxx/xxxx_xxxxxxx.xpredictive
130Filexxxxxx.xxxpredictive
131Filexxxxxx_xxxx.xxxpredictive
132Filexxxxxx_xxx_xxxxxx.xxxpredictive
133Filexxxxxx-xxxx.xxxpredictive
134Filexxxx$xx.xxxpredictive
135Filexxxx.xxxpredictive
136Filexxxx/xxxx.xxxpredictive
137Filexxxxxxxxxxxxx.xxxpredictive
138Filexxxxxxx.xxxpredictive
139Filexxxxxxxxxxxxxxxxx.xxxpredictive
140Filexxxxxxxxxxxxxxxx.xxxpredictive
141Filexxxxxxxxxxxxxxx.xxxpredictive
142Filexxxxxxxxx.xxxpredictive
143Filexxxxx_xxxxx.xxxpredictive
144Filexxxxxx.xxxpredictive
145Filexxxxxxxxx.xxxpredictive
146Filexxxxxx/xxxxxxx/xx-xx/xxxx/xxxxx.xxxpredictive
147Filexxxx-xxxxxxx.xxxpredictive
148Filexxxxx_xxxxxx.xxxpredictive
149Filexxxxxxxxx/xxxxxxxxx/xxxxx/xxxxx.xxxxxxx.xxxpredictive
150Filexxxxxx.xxxpredictive
151Filexxxx.xxxpredictive
152Filexxxx/xxx.xxx?xx=xxxxxxpredictive
153Filexxxxxxxxxxxxxx.xxxpredictive
154Filexxxx\xxxxxxxxxx\xxxxxxx_xxxxxxxxx.xxxpredictive
155Filexxxx/xxx/xxxx-xxxxx.xxxpredictive
156Filexxxx.xxxpredictive
157Filexxxx/xxxxxxxxxxxx.xxxpredictive
158Filexxxxxxxx.xxxpredictive
159Filexxxx_xxxx.xxxpredictive
160Filexx-xxxxx/xxxxxxxx/xxxx-xxxxxxx.xxxpredictive
161Filexx-xxxxx/xxxxxxxx/xxxxx-xxxx-xxxxxx-xxxxxxxx.xxxpredictive
162Filexxxxxxxxxxxxxx.xxxpredictive
163Filexxxx/xxxx_xxxxxx.xpredictive
164Filexxxx_xxxxxx.xpredictive
165File\xxxxx\xxxxx\xxxxxxxxx.xxxpredictive
166File\xxxx.xxxpredictive
167File\xxxx\xxxxxxxxxx\xxxx.xxxpredictive
168File_xxxxx.xxxpredictive
169File~/xxxxxxxx/xxxxxxxx.xxxpredictive
170File~/xxx/xxxxxxxxx/xxxx/xxxx/xxxxxx.xxxpredictive
171File~/xxxx/xxxxx.xxxpredictive
172Libraryxxxxxx[xxxxxx_xxxxpredictive
173Argument$xxxxxxxx.xxxpredictive
174Argumentxxx_xxxxpredictive
175Argumentxxxxxxxpredictive
176Argumentxxxxxxxpredictive
177Argumentxxxxxxxxxxx_xxpredictive
178Argumentxxpredictive
179Argumentxxxxxxxxpredictive
180Argumentxxxxxpredictive
181Argumentxxxxxxxxpredictive
182Argumentxxxxxxxxpredictive
183Argumentxxpredictive
184Argumentxxxxxxx_xxpredictive
185Argumentxxxxxxxxpredictive
186Argumentxxpredictive
187Argumentxxxpredictive
188Argumentxxxxxxxx xxxxpredictive
189Argumentxxxxxxxx xxxx/xxxxxxxxxxxpredictive
190Argumentxxxx_xxpredictive
191Argumentxxx_xxpredictive
192Argumentxxxpredictive
193Argumentxxxxx_xxpredictive
194Argumentxxxxxpredictive
195Argumentxxxxpredictive
196Argumentxxxxxx[xxxxxx_xxxx]predictive
197Argumentxxxxxxxxxxxx/xxxxxxx/xxxxxxxxpredictive
198Argumentxxxxxxxxxxxx/xxxxxxx/xxxxpredictive
199Argumentxxxxxxx_xxpredictive
200Argumentxxxxxx_xxpredictive
201Argumentxxxxxxxxpredictive
202Argumentxxxxxxxxpredictive
203Argumentxxxxxxpredictive
204Argumentxxxxxx/xxxxxxpredictive
205Argumentxxxxxpredictive
206Argumentxxxxxxxxxxpredictive
207Argumentxxxxxxxxpredictive
208Argumentxxxxxx_xxxxxxxx_xxxpredictive
209Argumentxxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxx/xxxxxxxpredictive
210Argumentxxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxpredictive
211Argumentxxxxxxxxxxxxpredictive
212Argumentxxxxxxxxxxxxpredictive
213Argumentxxxpredictive
214Argumentxxxxx_xxpredictive
215Argumentxxxxxxxxpredictive
216Argumentxxxxpredictive
217Argumentxxxpredictive
218Argumentxxpredictive
219Argumentxxpredictive
220Argumentxxxxxpredictive
221Argumentxxxx_xxpredictive
222Argumentxx_xxxxpredictive
223Argumentxxxxxxx_xxxxpredictive
224Argumentxxxxpredictive
225Argumentxxxxxxpredictive
226Argumentxxxpredictive
227Argumentxxxx/xxxxxx_xxxxpredictive
228Argumentxxxxxxxxpredictive
229Argumentxxxpredictive
230Argumentxxxx_xxxxpredictive
231Argumentxxx_xxpredictive
232Argumentxxxxxpredictive
233Argumentxxxx_xxpredictive
234Argumentxx_xxxxxxxxpredictive
235Argumentxxxxxxxxpredictive
236Argumentxxxxxxxxx_xxxxxxxx_xxxxpredictive
237Argumentxxxxxpredictive
238Argumentxxxxpredictive
239Argumentxxxxpredictive
240Argumentxxx/xxxpredictive
241Argumentxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxx/xxx/xxx/xxx/xxxxxx/xxxxxx/xxxxxx/xxxxxx/xxxxxxxxx/xxxxxxxxx/xxxxxxxxx/xxxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxx/xxxxxxxxxxx/xxxxxxxxxxx/xxxxxxxxxxx/xxxxxxxx/xxxxxxxxx/xxxxxxxxxx/xxxxxxx/xxxxxxxxxx/xxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxx/xxx/xxxxxx/xxxxxxxxxxx/xxxxxxxxx/xxxxxxxxx/xxxxxxxxx/xxxxxxxxx/xxxxxxxx/xxxxxxxxxxx/xxpredictive
242Argumentxx_xxxxxxxxxxxpredictive
243Argumentxxxxpredictive
244Argumentxxxxpredictive
245Argumentxxxxxxxxpredictive
246Argumentxxxxxxxxpredictive
247Argumentxxxxpredictive
248Argumentxxxx_xxxxpredictive
249Argumentxxxxxxxxxpredictive
250Argumentxxxxx_xxxx_xxxpredictive
251Argumentxxxxx_xxxx_xxxxpredictive
252Argumentxxxxxxx_xxxpredictive
253Argumentxxpredictive
254Argumentxxxxxx_xxpredictive
255Argumentxxxxxxpredictive
256Argumentxxxx_xxpredictive
257Argumentxxxx-xxxxxxxpredictive
258Argumentxxxxxxxxpredictive
259Argumentxxxxpredictive
260Argumentxxxxxxxxpredictive
261Argumentx_xxpredictive
262Argumentxxxxxxpredictive
263Argumentxxxxxx_xxpredictive
264Argumentxxxxxxxxpredictive
265Argumentxxxxxxxxpredictive
266Argumentxxxxxxxxxpredictive
267Argumentxxxxxxxxxxxxpredictive
268Argumentxxxxxxxxxpredictive
269Argumentxxxx$xx.xxxpredictive
270Argumentxxxxxxpredictive
271Argumentxxxpredictive
272Argumentxxxx_xxpredictive
273Argumentxxxxxx/xxxx_xxpredictive
274Argumentxxxxxxxxpredictive
275Argumentxxxxxxpredictive
276Argumentxxxxxxpredictive
277Argumentxxxpredictive
278Argumentxxxx_xxpredictive
279Argumentxxxxxxxx/xxxxxxxxpredictive
280Argumentxxxxxpredictive
281Argumentxxxxxpredictive
282Argumentxxxxx/xxxxxxxpredictive
283Argumentxxxxxxxxxpredictive
284Argumentxxxxxpredictive
285Argumentxxxx_xx[]predictive
286Argumentxxxxxxxxxpredictive
287Argumentxxxxpredictive
288Argumentxxxx/xxxxpredictive
289Argumentxxxxxxpredictive
290Argumentxxxxxxpredictive
291Argumentxxxxxxxxpredictive
292Argumentxxxxxxxx/xxxxxxxxpredictive
293Argumentxxxx[xxxxxx]predictive
294Argumentxxxx_xxpredictive
295Argumentxxxxpredictive
296Argumentxxxx_xxxxpredictive
297Argumentxxpredictive
298Argumentx_xxpredictive
299Argumentxxxx/xxxxxxxx/xxxxxxxxx/xxxxx/xxxx/xxxx/xx/xxx/xxxxxxxxxx/xxxxxx/xxxxxx/xxxxxx/xx/xxxxxxxx/xxxxx/xx/xxx_xxxx/xxx_xxxx/xxx_xxxxx/xx_xxxxxxxxxxxx/xxxxx_xxxxxxxxxx/xxxxxxx_xxxxxxx/xxxxxxxx_xxxxx/xxxxxxx_xxxxx/xxxxxxx_xxxxxx/xxxxxxx_xxxx_xxxxxx/xxxxxxx_xxxxxxxxx/xxx_xxx/xx_xxxxxx_xxxx/xxxxxxx_xxxxx/xxxxxx/xxxxx/xxxpredictive
300Argument\xxx\predictive
301Argument\xxx\predictive
302Input Value' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxxpredictive
303Input Value/\xxxxxxx.xxxpredictive
304Input Valuexx' xxx xxx_xxxx.xxxxxxx('xxxx://xxxxxxxxx_xxxx/xxxxx')='x' xxxxx xx xxxxx_xxxx)) --predictive
305Input Value<xxxxxx>xxxxx(x)</xxxxxx>predictive
306Input Valuexxxxxxpredictive

参考 (3)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!