SharePoint WebPartPagesWebService GetWebPartPageConnectionInfo Exploitation

Ibrahim Saud@tektrix

•updated 23 days ago•0•0•2

Detects an exploitation attempt against the SharePoint WebPartPagesWebService using the GetWebPartPageConnectionInfo method. The rule monitors for suspicious input patterns such as 'Register' and 'ignoreParentFrozen' within the URI query, which are indicative of a directive injection vulnerability.