Forum Discussion
Robert_Shortley
Nimbostratus
NimbostratusASM Reading PDF Content as Attack from Multipart/Form-data Web Form Upload
I have one site that I'm trying ASM on, and uploading a PDF from a FILE input in a multipart/form-data web form is triggering a SQL Injection blockage from the ASM.
The ASM seems to be choking o...
Robert_ShortleyNimbostratus
NimbostratusContent-Disposition: form-data; name="gfe_lib_file";
filename="C:\Users\xxxxxxxxxx\Desktop\xxxxxxxxxx.pdf"
Content-Type: application/pdf
%PDF-1.4
1 0 obj
<<
/Creator (Oracle10gR2 AS Reports Services)
/CreationDate (D:20150807110634)
/ModDate (D:20150807110634)
/Producer (Oracle PDF driver)
/Title (o32815067.out)
/Author (Oracle Reports)
>>
endobj
5 0 obj
<>
stream
Gat=.=``=g%Y"/U5g=-4HE(eY04&oB7:I6RCe9cQGeBNJ/OjKqbil9&.MMjZ"hL2Q7E_jY<9uGu
7K[6cJYQ%&4_=DJEocWl0'/mX1&X/OVc'do-7VZqs5[n<5Lk$.Q@rL
bhA+\AGQ-TPe-XP:UO8)=g]l3^RMG,eD>;T0RHd_K`]PRnq+r!]",LJi3Mrl3:UFsm8\g%N&p![B5lB'&1m=ITh\LtiNEn!s2;\0:]C;7?naZ>
JpY4^:iR,19>aO.,Ud!?"Q/7'f7_T'S?SabW0;4bo6W9*`f&.*(]p;%ogjQ,i!TnR`A[i3[F
...etc
