HTTP: SQL Injection Detected on HTTP Response Page
This signature detects specific characters, typically used in SQL procedures, within an HTTP connection. Because these characters are not normally used in HTTP, this can indicate a SQL injection attack through a procedure. However, it can be a false positive.
Short Name
HTTP:SQL:INJ:RESPONSE-PAGE
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Detected HTTP Injection Page Response SQL on
Release Date
03/02/2015
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Unknown