地图 / Blind SQL INJ

Blind SQL INJ

SQL 注入 / SQL 注入 / #115304

厂商: Paragon Initiative Enterprises
严重程度: 未评级
赏金: —
弱点: SQL 注入
研究员: @pentesters
披露日期: 2016-06-17
资产: —
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（1376 字符中的一小部分）

The test result seems to indicate a vulnerability because the response contains SQL Server errors. This suggests that the test managed to penetrate the application and reach the SQL query itself, by injecting hazardous characters.

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Paragon Initiative Enterprises 所有。

时间线

2016-02-08报告提交
2016-06-17公开披露

阅读 HackerOne 原文 ↗作者 @pentesters · 版权归作者与 Paragon Initiative Enterprises 所有

同类报告

SQL Injection Extracts Starbucks Enterprise Accounting, Financial, Payroll DatabaseStarbucks · 2019-08-06 SQL injection in https://labs.data.gov/dashboard/datagov/csv_to_json via User-agentGSA Bounty · 2019-03-22 Time-Based SQL injection at city-mobil.ruMail.ru · — · $15,000 SQL injection at https://sea-web.gold.razer.com/ajax-get-status.php via txid parameterRazer · — · $2,000 SQL Injection in https://api-my.pay.razer.com/inviteFriend/getInviteHistoryLogRazer · — · $2,000 Blind SQL InjectionInnoGames · — · $2,000