Timeline for Can you exploit an SQLi authentication bypass for anything else?
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 5, 2022 at 12:05 | comment | added | null | I'll add that to my knowledge "might" is never associated with 100% certainty, you will find that most of the time it's 50% / 30%, which mean that it does not exclude the possibility that it is not possible. | |
| Aug 5, 2022 at 11:53 | comment | added | null | I don't see any play with the meaning of the words here. There is no arguing here that it depends on the exact vulnerability since no context was provided. You did interpret my answer exactly as intented. | |
| Aug 5, 2022 at 11:18 | comment | added | Steffen Ullrich | @null: That's an interesting play with the meaning of words. I personally would read "yes you might ...." as "the vulnerability allows in general to do this and it is up to your knowledge to use the vulnerability this way - and here are some resources about it". I instead would argue that it depends on the exact vulnerability if this is even possible and the best resources don't help if the vulnerability does not allow it. Maybe clarify the intended meaning in your answer? | |
| Aug 5, 2022 at 11:16 | vote | accept | ishy987 | ||
| Aug 5, 2022 at 11:16 | |||||
| Aug 5, 2022 at 10:13 | comment | added | null | The question is using "can". I answered "yes you might". Definition of might: used to say that something is possible. | |
| Aug 5, 2022 at 10:01 | comment | added | Steffen Ullrich | Kind of. The OP is basically asking if some unspecific vulnerability can not only be used for authentication bypass but also for other things. The most specific answer possible to this is: maybe, maybe not :) But I don't think that your "yes" is the correct answer, since it depends on the details of the vulnerability. | |
| Aug 5, 2022 at 9:53 | comment | added | null | I believe the problem is not my answer but the question which is too vague. Why would you downvote my answer which as some really usefull resources for someone who would ask this kind of question ? You did not even provide a better answer... | |
| Aug 4, 2022 at 19:25 | comment | added | Steffen Ullrich | Downvoted because the answer is not actually helpful: You simply claim "yes" without further explanation. The resources you link are generic information about SQL injection which do not provide any explanation matching the OPs question either. | |
| Aug 4, 2022 at 18:11 | history | answered | null | CC BY-SA 4.0 |