Imperva Cyber Community

ON-Prem customers that have "SecureSphere Emergency Feed" (THR feeds) are protected OOTB.

In order to verify that the protection is implemented,

Please verify that Below Signatures are exists.

Signature 1:

Signature Name:

SQL Injection using json operator 1

Signature Pattern

part="array", rgxp="['\"`]\sor[\s\S]{1,50}(\{['\"][\s\S]{1,50}['\"]\:[\s\S]{1,50}\})[\s\S]{1,20}(\?\||\?\&)\sarray(\[(?:\'?[\s\S]{1,50}\'?)\]\s?)(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 2:

Signature Name:

SQL Injection using json operator 2

Signature Pattern

part="json",rgxp="['\"`]\sor[\s\S]{1,50}\'(\[(?:\'?[\s\S]{1,50}\'?)\]\s?)\'\:\:jsonb?[\s\S]{0,50}(?:->>)[\s\S]{1,50}(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 3:

Signature Name:

SQL Injection using json operator 3

Signature Pattern

part="array", part="json", rgxp="['\"`]\sor[\s\S]{1,50}\:\:jsonb?\s\|\|[\s\S]{1,50}\:\:jsonb?[\s\S]{1,50}(?:--|#|\$|;)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 4:

Signature Name:

SQL Injection using json operator 4

Signature Pattern

part="\x7d\x27 ?", rgxp="^.{0,100}['\"`][\s\S]{1,50}(\{['\"][\s\S]{1,50}['\"]\:[\s\S]{1,50}\})[\s\S]{1,20}(\?)\s\'[\s\S]{1,50}\'\s(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

ON-Prem customers that have "SecureSphere Emergency Feed" (THR feeds) are protected OOTB.

In order to verify that the protection is implemented,

Please verify that Below Signatures are exists.

Signature 1:

Signature Name:

SQL Injection using json operator 1

Signature Pattern

part="array", rgxp="['\"`]\sor[\s\S]{1,50}(\{['\"][\s\S]{1,50}['\"]\:[\s\S]{1,50}\})[\s\S]{1,20}(\?\||\?\&)\sarray(\[(?:\'?[\s\S]{1,50}\'?)\]\s?)(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 2:

Signature Name:

SQL Injection using json operator 2

Signature Pattern

part="json",rgxp="['\"`]\sor[\s\S]{1,50}\'(\[(?:\'?[\s\S]{1,50}\'?)\]\s?)\'\:\:jsonb?[\s\S]{0,50}(?:->>)[\s\S]{1,50}(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 3:

Signature Name:

SQL Injection using json operator 3

Signature Pattern

part="array", part="json", rgxp="['\"`]\sor[\s\S]{1,50}\:\:jsonb?\s\|\|[\s\S]{1,50}\:\:jsonb?[\s\S]{1,50}(?:--|#|\$|;)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 4:

Signature Name:

SQL Injection using json operator 4

Signature Pattern

part="\x7d\x27 ?", rgxp="^.{0,100}['\"`][\s\S]{1,50}(\{['\"][\s\S]{1,50}['\"]\:[\s\S]{1,50}\})[\s\S]{1,20}(\?)\s\'[\s\S]{1,50}\'\s(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

ON-Prem customers that have "SecureSphere Emergency Feed" (THR feeds) are protected OOTB.

In order to verify that the protection is implemented,

Please verify that Below Signatures are exists.

Signature 1:

Signature Name:

SQL Injection using json operator 1

Signature Pattern

part="array", rgxp="['\"`]\sor[\s\S]{1,50}(\{['\"][\s\S]{1,50}['\"]\:[\s\S]{1,50}\})[\s\S]{1,20}(\?\||\?\&)\sarray(\[(?:\'?[\s\S]{1,50}\'?)\]\s?)(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 2:

Signature Name:

SQL Injection using json operator 2

Signature Pattern

part="json",rgxp="['\"`]\sor[\s\S]{1,50}\'(\[(?:\'?[\s\S]{1,50}\'?)\]\s?)\'\:\:jsonb?[\s\S]{0,50}(?:->>)[\s\S]{1,50}(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 3:

Signature Name:

SQL Injection using json operator 3

Signature Pattern

part="array", part="json", rgxp="['\"`]\sor[\s\S]{1,50}\:\:jsonb?\s\|\|[\s\S]{1,50}\:\:jsonb?[\s\S]{1,50}(?:--|#|\$|;)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 4:

Signature Name:

SQL Injection using json operator 4

Signature Pattern

part="\x7d\x27 ?", rgxp="^.{0,100}['\"`][\s\S]{1,50}(\{['\"][\s\S]{1,50}['\"]\:[\s\S]{1,50}\})[\s\S]{1,20}(\?)\s\'[\s\S]{1,50}\'\s(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

ON-Prem customers that have "SecureSphere Emergency Feed" (THR feeds) are protected OOTB.

In order to verify that the protection is implemented,

Please verify that Below Signatures are exists.

Signature 1:

Signature Name:

SQL Injection using json operator 1

Signature Pattern

part="array", rgxp="['\"`]\sor[\s\S]{1,50}(\{['\"][\s\S]{1,50}['\"]\:[\s\S]{1,50}\})[\s\S]{1,20}(\?\||\?\&)\sarray(\[(?:\'?[\s\S]{1,50}\'?)\]\s?)(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 2:

Signature Name:

SQL Injection using json operator 2

Signature Pattern

part="json",rgxp="['\"`]\sor[\s\S]{1,50}\'(\[(?:\'?[\s\S]{1,50}\'?)\]\s?)\'\:\:jsonb?[\s\S]{0,50}(?:->>)[\s\S]{1,50}(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 3:

Signature Name:

SQL Injection using json operator 3

Signature Pattern

part="array", part="json", rgxp="['\"`]\sor[\s\S]{1,50}\:\:jsonb?\s\|\|[\s\S]{1,50}\:\:jsonb?[\s\S]{1,50}(?:--|#|\$|;)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 4:

Signature Name:

SQL Injection using json operator 4

Signature Pattern

part="\x7d\x27 ?", rgxp="^.{0,100}['\"`][\s\S]{1,50}(\{['\"][\s\S]{1,50}['\"]\:[\s\S]{1,50}\})[\s\S]{1,20}(\?)\s\'[\s\S]{1,50}\'\s(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

ON-Prem customers that have "SecureSphere Emergency Feed" (THR feeds) are protected OOTB.

In order to verify that the protection is implemented,

Please verify that Below Signatures are exists.

Signature 1:

Signature Name:

SQL Injection using json operator 1

Signature Pattern

part="array", rgxp="['\"`]\sor[\s\S]{1,50}(\{['\"][\s\S]{1,50}['\"]\:[\s\S]{1,50}\})[\s\S]{1,20}(\?\||\?\&)\sarray(\[(?:\'?[\s\S]{1,50}\'?)\]\s?)(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 2:

Signature Name:

SQL Injection using json operator 2

Signature Pattern

part="json",rgxp="['\"`]\sor[\s\S]{1,50}\'(\[(?:\'?[\s\S]{1,50}\'?)\]\s?)\'\:\:jsonb?[\s\S]{0,50}(?:->>)[\s\S]{1,50}(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 3:

Signature Name:

SQL Injection using json operator 3

Signature Pattern

part="array", part="json", rgxp="['\"`]\sor[\s\S]{1,50}\:\:jsonb?\s\|\|[\s\S]{1,50}\:\:jsonb?[\s\S]{1,50}(?:--|#|\$|;)"

Protocols

http/s

Search Signature in:

Urls and Parameters

Signature 4:

Signature Name:

SQL Injection using json operator 4

Signature Pattern

part="\x7d\x27 ?", rgxp="^.{0,100}['\"`][\s\S]{1,50}(\{['\"][\s\S]{1,50}['\"]\:[\s\S]{1,50}\})[\s\S]{1,20}(\?)\s\'[\s\S]{1,50}\'\s(?:;|--|\#|$)"

Protocols

http/s

Search Signature in:

Urls and Parameters