Overview for rules released by Trustwave SpiderLabs in January for ModSecurity Commercial Rules package. The rules are available for versions 2.9.x and 3.x of ModSecurity.
ModSecurity Commercial Rules detect attacks or classes of attacks on web applications and their components as well as provide virtual patches for public vulnerabilities.
Release Summary
Joomla! Component J-CruisePortal 6.0.4 SQLi
Joomla! Component JMultipleHotelReservation 6.0.7 SQLi
Joomla! Component J-ClassifiedsManager 3.0.5 SQLi
Joomla! Component J-BusinessDirectory 4.9.7 SQLi
Joomla! Component VMap 1.9.6 SQLi
Joomla! Component vRestaurant 1.9.4 SQLi
Joomla! Component vReview 1.9.11 SQLi
Joomla! Component vAccount 2.0.2 SQLi
Joomla! Component vWishlist 1.0.1 SQLi
Joomla! Component vBizz 1.0.7 RCE
Joomla! Component vBizz 1.0.7 SQLi
Joomla! Component Easy Shop 1.2.3 LFI
WordPress Plugin Adicon Server 1.2 SQLi
Joomla! Component JoomCRM 1.1.1 SQLi ()
WordPress Plugin AutoSuggest 0.24 SQLi ()
Joomla! Component JE Photo Gallery 1.1 SQLi ()
How to Update
All the rules released this month are available for download and can be configured using the ModSecurity Dashboard. The rules are associated with the default profile and enabled for all licensed servers. To verify the rules were successfully downloaded by ModSecurity, log in to the ModSecurity Dashboard and verify the server "Last seen" date, which indicates the last successful download for the specified server.
