client9/libinjection

False negative

dune73 opened this issue · 0 comments

dune73 commented

The following payload is not detected by libinject (via ModSecurity 2.9.3).

a=SELECT-id-1.FROM`test`

(Based on tweet https://twitter.com/brutelogic/status/1189184204073885697)