“…We are happy to announce that we have published signatures to help protect from commonly used exploitations of the SQL injection and Cross-site scripting vulnerabilities.
The Microsoft Malware Protection Center encyclopedia has more information about these signatures:
- Expl:Win/HTTP.URL.SQLInj!0000-0000 contains information about the SQL injection signature
- Expl:Win/HTTP.URL.XSS!0000-0000 contains information about the Cross-site scripting signature…”
Check out https://blogs.technet.com/isablog/archive/2010/05/02/network-inspection-system-nis-adds-signatures-to-help-in-sql-injection-and-cross-site-scripting-prevention.aspx for more information.
HTH,
Deb
DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)
“MS SECURITY”
[email protected]