Blind SQL injections on product_info.php page

[lindsay]

I am assuming that this is false positive issue.

[duncn3]

Lindsay - I'm going through the exact same issue right now. mod_security is not installed for me either. I'm working with my hosting provider to see if they have any suggestions on what I can give security metrics to show them this is a false positive. If so I'll let you know.

Have you figured anything out yet?

[lindsay]

Almost a year ago and I am still having the same issues. Is this supposed to keep happening? I still use Security Metrics and I am having issues with different pages now. How do I check to make sure that these don't need to be a false positive? Thanks!