HTTP: Oversized Cast And Convert Statement Possible SQL Injection Obfuscation
This signature detects attempts to exploit Oversized Cast And Convert Statement SQL Injection vulnerability. An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.
References
URL: https://isc.sans.edu/diary/Mass+exploits+with+SQL+Injection/3823
Short Name
HTTP:SQL:INJ:OVERSIZE-STATEMENT
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
And Cast Convert Injection Obfuscation Oversized Possible SQL Statement
Release Date
06/09/2015
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
srx-branch-12.3
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx-12.3
vmx-19.3
srx-12.3
Sigpack Version
3324
False Positive
Unknown