On this page

Atomicorp WAF Rule 380123

Rule Summary

  • Rule ID: 380123
  • Status: Active
  • Alert message: Atomicorp.com WAF Rules: SQL injection
  • Observed CWEs: CWE-89 (7), CWE-287 (1), CWE-305 (1)
  • Revision: 5
  • Rule severity: Critical (2)
  • Phase: 1 (request headers)
  • Request surfaces: Request URI
  • Rule action: deny
  • HTTP status: 403
  • Public tags: SQLi
  • Logging: log, auditlog

Description

This rule detects behavior identified by its current alert as “SQL injection” in the request URI. It evaluates during the request headers phase and denies matching traffic with HTTP status 403.

This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.

CVEVulnerabilityProductCVSSSeverity
CVE-2018-18800PayPal-Credit Card-Debit Card Payment 1.0 - SQL Injectionwelcome to our resort9.8 (v3.0)Critical
CVE-2020-10546rConfig 3.9.4 - SQL Injectionrconfig9.8 (v3.1)Critical
CVE-2020-10547rConfig 3.9.4 - SQL Injectionrconfig9.8 (v3.1)Critical
CVE-2020-10548rConfig 3.9.4 - SQL Injectionrconfig9.8 (v3.1)Critical
CVE-2020-10549rConfig <=3.9.4 - SQL Injectionrconfig9.8 (v3.1)Critical
CVE-2023-34124SonicWall GMS and Analytics Web Services - Shell Injectionanalytics9.8 (v3.1)Critical
CVE-2020-5766SRS Simple Hits Counter 1.0.3-1.0.4 - Unauthenticated Blind SQL Injectionsrs simple hits counter7.5 (v3.1)High
CVE-2023-34133SonicWall GMS and Analytics - SQL Injectionanalytics7.5 (v3.1)High

Observed CWEs

These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.

CWERelated Published CVEs
CWE-89CVE-2018-18800 , CVE-2020-10546 , CVE-2020-10547 , CVE-2020-10548 , CVE-2020-10549 , CVE-2020-5766 , CVE-2023-34133
CWE-287CVE-2023-34124
CWE-305CVE-2023-34124