title: Why there is difference in Active scan report for same application in ZAP TOOL
body: <p>I am using ZAP TOOL for security testing and
  Doing two active scans for the same application without changing anything, the results are different.
  For example, in the first scan for the same url it shows me a possible SQL injection in some parameters and when I launch it a second time for the same url it shows me the possible injection in other parameters. I don't know if the data used to make the request can also influence, or the data in the database</p>
  <p>If haven't changed on application, I have done manual scan using Active scan and every time i got different result for same application . Can anyone have any idea why is happening ?</p>
  <p>Is the Zaps tools uses the different scripts/attack files every time for Active scan.
  I would like to know what factors influence different results and where can I find out how active scanning actually works. Thanks</p>