|
Description
|
|
Special characters in URL might be encoded using the %xx encoding. Some attacks use a double encoding to evade signature protection.
This alarm might also be raised in case an URL is passed as a parameter twice, and encoded each time. This alarm is being raised by a phpbb worm which exploit the highlight parameter vulnerability.
|
