client9 / client9/libinjection

False negative

Open
#148 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
1k
Forks
282
PR merge metrics
No merged PRs in 30d

Description

The following payload is not detected by libinject (via ModSecurity 2.9.3).

```
a=SELECT-id-1.FROM`test`
```

(Based on tweet https://twitter.com/brutelogic/status/1189184204073885697)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.