SQL Injection flagged when 403 Forbidden

huisheng · 2020-12-10T04:17:28+00:00

There was an error rendering this rich post.

Hi, I'm scanning a site with F-Secure Radar.
It keep flagging SQL Injection High even though the response is: HTTP/1.1 403 Forbidden (our apps detect invalid input and response 403)
Here is a video showing what I meant:

Thanks.

Find more posts tagged with

Hi huisheng

Hi James, how do I submit a support request?

Is there an email?

Thanks.

Hi huisheng,

I suggest to submit a support request so we can investigate further with our product team

Please note the URL we use to scan is locked down to our IP.

Not sure if this will impact the scanning and produce false positive?