Sony · Report #1213207
SQL Injection on [█████████]
Validstatus
highseverity
22upvotes
7 Dec 2022disclosed
Summary
The researcher reported that the login form of a Sony endpoint was susceptible to an error-based SQL injection vulnerability. The researcher intercepted a login request using BurpSuite and then used SQLMap to discover the SQL injection. Once the SQL injection vulnerability was discovered, SQLMap was used to enumerate database names.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.