Signature Detail
Short Name |
HTTP:SQL:INJ:NULLBYTE-COMMENT |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
NullByte Comment Out Query SQL Injection |
Release Date |
2012/07/11 |
Update Number |
2160 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: NullByte Comment Out Query SQL Injection
This signature detects attempts to perform SQL Injection. Dynamic web pages that accept user input without proper variable validation are vulnerable to arbitrary command injection.
References