Mars · Report #2453475
Sqli on ██████ search functionality
Validstatus
mediumseverity
47upvotes
25 Jun 2024disclosed
Summary
A SQL injection vulnerability is being reported on the search functionality of the ██████ website. The vulnerability allows an attacker to inject malicious SQL code into the search query, potentially exposing unpublished posts from the database and enabling other harmful SQL commands.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.