|
|||
Rule General Information |
---|
Release Date: | 2021-12-20 | |
Rule Name: | SQL Injection Detection - Boolean Injection 19 | |
Severity: | ||
CVE ID: | ||
Rule Protection Details |
---|
Description: | SQL injection vulnerability is caused by the web application's lack of validation of user input. Attackers submit sql statement to change the execution logic of background sql query, so as to obtain sensitive information or upload webshell.This rule is used to detect Boolean Injection in HTTP requests. | |
Impact: | An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully. | |
Affected OS: | Windows, Linux, Others | |
Reference: | ||
Solutions |
---|
Upgrade the latest patch of the application. |