HexBrain

Legal Robot · Report #211988

sql injection vulnerablity found

N/Astatus
5upvotes
13 Oct 2017disclosed

How it was found

a Blind Text Injection Differential vulnerablity was found on your site in the url :https://www.legalrobot.com/assets/icons

a GET request made on GET /assets/icons/?v=9wr1emhXD568%3B'%20UNION%20SELECT%208%2C%20table_name%2C%20'vega'%20FROM%20information_schema.tables%20WHERE%20table_name%20like'%25 result up in vulnerablity

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original