Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Probable bug: SQL injection avoidable false positive ?

Anders | Last updated: Sep 28, 2015 08:54AM UTC

"Issue detail The [...redacted...] cookie appears to be vulnerable to SQL injection attacks. The payload ' and '6143'='6143 was submitted in the Auth-Portal cookie, and a database error message was returned. You should review the contents of the error message, and the application's handling of other input, to confirm whether a vulnerability is present. The database appears to be Oracle." The highlighted text in the response is 'oRA-1'. And the report is classed 'Confidence: Firm'. False positive: The highlighted text is inside a base64 string in a Set-Cookie header. The HTTP headers appear to be an unlikely place to look for database error messages, so it struck me that this might be an avoidable issue.

PortSwigger Agent | Last updated: Sep 30, 2015 08:17AM UTC