HexBrain

DigitalSellz · Report #20279

Verbose SQL error messages

Validstatus
2upvotes
17 Aug 2014disclosed

How it was found

When an SQL error occurs, a verbose error is displayed showing the full query and the path of the include file on the server. This is valuable information, revealing the structure of the database and the layout of files on the server.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original