Threat Description

Exploit: ​PHP/Preamble


Category: Malware
Type: Vulnerability, Exploit
Platform: PHP


Exploit:PHP/Preamble is a detection for a family of various PHP scripts. The scripts are used to test whether a particular site is vulnerable for a Remote File Inclusion (RFI) exploitation.


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More scanning & removal options

More information on scanning or removal options is available in the documentation for your F-Secure security product on the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.

Technical Details

An exploit is a short section of code that uses a vulnerability in an operating system or other software to run unauthorized code on target computers.

The scripts belonging to this family are usually used to test whether a site or a webpage is vulnerable to a Remote File Inclusion (RFI) vulnerability.

The scripts test various methods an attacker can use to introduce a malicious backdoor script onto the affected server.


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More