Hot answers tagged

2

First part of question is ... how would I exfiltrate information with this " condition I have found? Is there a special name for it other than SQL injection that I can read more about? No, this is exactly SQL injection. If the results of the query are being printed, it's possible to use UNION to mix in data from other tables that are not intended to be ...


1

What happened? The vulnerability scanner thinks that it found a possible reflective XSS or HTML injection vulnerability in the page. When it injected Oui"sTYLe='acu:Expre/**/SSion(Afih(9717))'bad=" as a GET request parameter, the page rendered with the following element in it: <a href="https://trojanmart.com/SSionAfih9717" title="Français " class=" "&...


Only top voted, non community-wiki answers of a minimum length are eligible