---
meta:
  author: "Christian S.J. Peron"
  description: None
  enabled: true
  name: 933120.yaml
tests:
  - test_title: 933120-1
    desc: "PHP Injection Attack: Configuration Directive"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: "localhost"
              Cache-Control: "no-cache, no-store, must-revalidate"
            method: POST
            port: 80
            data: "var=session.bug_compat_42%3dtrue"
            version: HTTP/1.0
          output:
            log_contains: id "933120"
