---
id: 3081
title: "8 High-impact Bugs and How HackerOne Customers Avoided a Breach: SQL Injection"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/8-high-impact-bugs-and-how-hackerone-customers-avoided-breach-sql-injection"
published_at: "2019-11-20T22:00:00Z"
tags: ["sql-injection", "owasp", "dod", "hacktivity", "starbucks", "vulnerability-series"]
phying_url: "https://phying.com/item/3081"
lang: en
---

# 8 High-impact Bugs and How HackerOne Customers Avoided a Breach: SQL Injection

## Summary

This series entry covers SQL injection, fifth most rewarded on HackerOne, with disclosed Starbucks and US DoD reports showing how verbose errors and XML upload endpoints lead to database compromise.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2019-11-20T22:00:00Z
- **Original:** https://www.hackerone.com/blog/8-high-impact-bugs-and-how-hackerone-customers-avoided-breach-sql-injection
- **Phying News:** https://phying.com/item/3081