Zapotek/arachni — Issue #165: SQL Injection False Positive for MSSQL
Author: mstanislav
Created: 2012-03-08 21:04:59+00:00
State: open

I was doing an assessment yesterday and received a bunch of SQL injection results for the string:

"[Microsoft][ODBC SQL Server Driver][SQL Server]String or binary data would be truncated."

I am not an MSSQL person but from what I've been able to research this is just an informational error message and not an indicator of the presence of any injection points.

Thanks!