Zapotek/arachni — Issue #106: SQLi false positives for demo.testfire.net
Author: virilefool
Created: 2011-11-28 20:31:36+00:00
State: open

Seems like your regex is too general. It flags /default.aspx with changing cookie inputs, but under Inspect the highlighted section is:

select software for your home computer.

Learn as much as you can about the product and what it does before you purchase it.

Understand the refund/return policy before you make your purchase.

Buy from

Which is probably not a result of the SQL injection. ;)