HexBrain

Unikrn · Report #866271

Lack of Input sanitization leads to database Character encoding configuration Disclosure

Validstatus
lowseverity
$100bounty
11upvotes
7 Aug 2020disclosed

How it was found

Summary: Email Input field during Register is not properly sanitized leads to sql error

Steps To Reproduce: During Register use '💩' character in email field

Impact

Information Exposure Through an Error Message ███████

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original