Skip to content

False negative #148

Description

@dune73

The following payload is not detected by libinject (via ModSecurity 2.9.3).

a=SELECT-id-1.FROM`test`

(Based on tweet https://twitter.com/brutelogic/status/1189184204073885697)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions