I'm a developer and I'm creating a script to interface with game servers to update player stats. I was sending a POST request with multipart form data and on the last boundary accidentally had the wrong boundary.
Content-Type: multipart/form-data; boundary=--------484554302
But one character was missing
----------48455430-- which triggered this response from the server:
MySQL error 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\r\n----------48455430-- = '' WHERE id = '463413'' at line 1)
I don't know too much about SQL but this seems like a potential vulnerability. Any advice?