Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

8 High-impact Bugs and How HackerOne Customers Avoided a Breach: SQL Injection

hackerone.com | vulnerability | #sql-injection | #owasp | #dod | #hacktivity | #starbucks | #vulnerability-series

Summary

This series entry covers SQL injection, fifth most rewarded on HackerOne, with disclosed Starbucks and US DoD reports showing how verbose errors and XML upload endpoints lead to database compromise.
Published
Collected

original ↗

Related coverage

  1. 8 High-Impact Bugs and How HackerOne Customers Avoided a Breach: Privilege Escalation (hackerone.com)
  2. Vulnerability discovery in Java applications (0xpat.github.io)
  3. 8 High-Impact Bugs and How HackerOne Customers Avoided a Breach: Information Disclosure (hackerone.com)
  4. How Federal Agencies Use Vulnerability Disclosure Policies to Level Up Security (hackerone.com)
  5. Why Every Federal Agency Needs a VDP (hackerone.com)
  6. Using Bug Bounty Talent Pools to Attract and Maintain Top Talent (hackerone.com)

back