Signature Detail
Short Name |
HTTP:SQL:INJ:INTO-OUTFILE |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
INTO OUTFILE/DUMPFILE Command Injection |
Release Date |
2012/07/11 |
Update Number |
2160 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: INTO OUTFILE/DUMPFILE Command Injection
This signature detects attempts to perform SQL Injection. Dynamic web pages that accept user input without proper variable validation are vulnerable to arbitrary command injection.
References