HTTP: Generic SQL Procedure Detection

This signature detects specific characters, typically used in SQL procedures, within an HTTP connection. Because these characters are not normally used in HTTP, this can indicate a SQL injection attack through a procedure. However, it can be a false positive.

Extended Description

SQL instructions could disclose, modify or destroy records stored in the database. This capability could be leveraged by the attacker to further penetrate the target host(s).

References

BugTraq: 93864

CVE: CVE-2014-2268

URL: http://security-papers.globint.com.ar/oracle_security/sql_injection_in_oracle.php https://pentest.blog/unexpected-journey-into-the-alienvault-ossimusm-during-engagement/ https://www.navixia.com/blog/entry/navixia-find-critical-vulnerabilities-in-vtiger-crm-cve-2014-2268-cve-2014-2269.html http://vtiger-crm.2324883.n4.nabble.com/Vtigercrm-developers-IMP-forgot-password-and-re-installation-security-fix-tt9786.html

Short Name

HTTP:SQL:INJ:PROC-GENERIC

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Generic SQL Procedure Detection

Extended Description

References

Found a potential security threat?