Signature Detail

HTTP: SQL 'waitfor delay' Command Injection Denial of Service

This signature detects attempts to perform an SQL injection attack against a web server. Some web applications may be vulnerable. A successful attack could result in a denial of service of the targeted website. This technique is also used to determine if a targeted site is vulnerable to "Blind SQL Injection" by gauging the time it takes to respond to such a request. However, it can be a false positive. To reduce false positives, it is strongly recommended that these signatures only be used to inspect traffic from the Internet to your organization's Web servers that use SQL backend databases to generate content and not to inspect traffic going from your organization to the Internet.

References

• URL: https://www.owasp.org/index.php/Blind_SQL_Injection
• URL: http://www.owasp.org/index.php/SQL_Injection