HexBrain

Gratipay · Report #81701

Possible SQL injection on "Jump to twitter"

Validstatus
lowseverity
2upvotes
21 Mar 2016disclosed

How it was found

The https://gratipay.com/on/twitter/' (single-quote at the end) request returns 500 Error, but https://gratipay.com/on/twitter/" returns 404 so i believe it may be an injection. To find the url, go to /search and jump to ' twitter.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original