Rule:--Sid:2304--Summary:This event is generated when an attempt is made to exploit a known vulnerability in a PHP web application running on a server.--Impact:Information gathering.--Detailed Information:This event is generated when an attempt is made to access the filefiles.inc.php on a web server running a PHP application. This may leadto information disclosure, further attacks against the system may bepossible with the information gained,--Affected Systems:	All systems running PHP applications--Attack Scenarios:An attacker can access an authentication mechanism and supply his/herown credentials to gain access. Alternatively the attacker can exploitweaknesses to gain access as the administrator by supplying input oftheir choosing to the underlying PHP script.--Ease of Attack:Simple. No exploit is required.--False Positives:None known.--False Negatives:None known.--Corrective Action:Ensure the system is using an up to date version of the software and hashad all vendor supplied patches applied.--Contributors:Sourcefire Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:--