8x8 · Report #722145
[CRITICAL] Sql Injection on http://axa.dxi.eu
Validstatus
criticalseverity
6upvotes
9 Jun 2020disclosed
Summary
One of the micro service endpoints of the ContactNow application constructed a SQL query utilizing user provided parameters without utilizing a proper prepared statement.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.