Sony · Report #1339430
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████
Validstatus
criticalseverity
26upvotes
6 Jul 2022disclosed
Summary
The researcher reported that a login form of a Sony website was vulnerable to a blind SQL injection. The researcher was able to use the blind SQL injection to enable xp_cmdshell functionality on the database and then run system commands. The output from the system commands was then obtained via DNS-based exfiltration.
https://infosecwriteups.com/how-i-escalated-a-time-based-sql-injection-to-rce-bbf0d68cb398
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.