Server-Side Include (SSI) Injection

Detects user-controlled input reflected in pages processed by SSI, enabling file disclosure and command execution.

zakirkun 0cb016c 2 files · 1.8 KB Updated

File contents

Server-Side Include Injection

Overview

Server-Side Includes (SSI) are directives processed by web servers (Apache, Nginx) before serving files. When user input is reflected in SSI-processed files, attackers can inject directives:

  • <!--#exec cmd="id"--> — executes arbitrary commands
  • <!--#include file="/etc/passwd"--> — reads arbitrary files

Remediation

  • Disable SSI processing for user-controlled content
  • HTML-encode all user input before including in server-processed pages
  • Use Content Security Policy to prevent SSI directive execution

zakirkun/ice-tea/tree/main/skills/injection/ssi-injection commit 0cb016c34f

Frequently asked questions

npx skillmds@latest add zakirkun/server-side-include-ssi-injection