SID 1:38993

Rule Category

SQL -- Snort has detected traffic associated with SQL injection or the presence of other vulnerabilities against SQL like servers.

Alert Message

SQL use of sleep function in HTTP header - likely SQL injection attempt

Rule Explanation

This event is generated when Sleepy User Agent SQL injection is detected. Impact: Web Application Attack Details: Attempted SQL injection using Sleep command in User Agent of request. Ease of Attack: Simple

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group