Add Alert dialog

This dialog allows you to manually add or change an Alert associated with a specific request.

Fields

The dialog has the following fields:

Type

The type of the alert is a pull down field which allows you to select one of a prepopulated set of issue types.
You can also enter your own text or change the text of one of the items you selected.
If you select one of the existing types then the Description, Solution and Other Info fields will be populated with text associated with the item you chose.

Risk

A pull down field which allows you to specify how serious you think the risk is:

Informational
Low
Medium
High

Confidence

A pull down field which allows you to specify how confident you are in the validity of the finding:

False Positive for potential issues that you later find are not exploitable
Low for unconfirmed issues
Medium for issues you are somewhat confident of
High for findings you are highly confident in
Confirmed for confirmed issues

Parameter

A pull down field which allows you to specify which parameter the issue is associated with.
The field is prepopulated with any URL and FORM parameters found, but you can also enter your own parameter name.
Array parameters (in URL query component and x-www-form-urlencoded request body) are identified with its index. For example, for a request containing choices[]=ChoiceA&choices[]=ChoiceB the first parameter would be identified as choices[0] and the second as choices[1].

Description

A general description of the type of issue found.
This is populated when you select one of the predefined types, but you can also change it as required.
Note that any changes you make will be lost if you select another type.

Other Info

Information specific to the particular issue you have found.
This is not prepopulated.

Solution

Recommendations about how to fix the issue.
This is populated when you select one of the predefined types, but you can also change it as required.
Note that any changes you make will be lost if you select another type.

Reference

One or more URLs pointing to more information on the internet about the selected type of alert.
This is populated when you select one of the predefined types, but you can also change it as required.
Note that any changes you make will be lost if you select another type.

Accessed via

History tab ‘New Alert…’ right click menu item
Alerts tab double clicking on an existing alert

See also

UI Overview for an overview of the user interface
Dialogs for details of the dialogs or popups