HTTP: SQL Commands Detected In HTTP URIs
This signature detects specific characters, typically used in SQL procedures, within an HTTP connection. Because these characters are not normally used in HTTP, this can indicate a SQL injection attack through a procedure.
Short Name
HTTP:SQL:REQ-URI
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Commands Detected HTTP In SQL URIs
Release Date
03/17/2017
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Unknown