ZAP Report is saying SQL injection
Question
I performed a scan through ZAP, it is showing SQL injection in report, However I am not able to regenerate it manually. Can someone guide me ?
I tried to post the same request in "Postman" but its saying "Please provide token". Click here to see image Image
1 answers
solution1
0 2018-02-27 13:25:00
It may be a false positive. Generated report we need find it.
The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.
Related Question
How can I avoid ZAP SQL Injection alerts if my application is already secured against that attack?
how to exclude unnecessary URLs in ZAP html report
How to export the OWASP ZAP Spider report to Excel?
Significance of few attributes in ZAP report alert
Is it a SQL injection?
ZAP seems to incorrectly report path traversal vulnerability in Angular app
Why there is difference in Active scan report for same application in ZAP TOOL
Prevent SQL wildcard injection
SQL injection theory
SQL Injection with Prepared Statements
Related Tags