HexBrain

Sony · Report #2256032

SQL injection at ███████

Validstatus
criticalseverity
63upvotes
24 Jan 2024disclosed

Summary

The researcher reported that a Sony website was vulnerable to an error-based SQL injection. The researcher was able to demonstrate the vulnerability by using SQLMap to extract data from the database such as database names.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original