Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

FileFlows Vulnerabilities - SQL Injection by Decompiling .NET Code

projectblack.io | research | #sql-injection | #vulnerability | #decompilation | #dotnet | #fileflows

Summary

Decompiling FileFlows' .NET binaries uncovered a SQL injection in the library-file search endpoint; simple quote replacement was insufficient to stop it on some supported databases.
Published
Collected

original ↗

Related coverage

  1. Halloween Hacks and How to Avoid Them #SecOps Edition (bugcrowd.com)
  2. Vulnerability discovery in Java applications (0xpat.github.io)
  3. From opcode to code: how AI chatbots can help with decompilation (swarm.ptsecurity.com)
  4. Advanced MSSQL Injection Tricks (swarm.ptsecurity.com)
  5. Tales from the Trace: How Agentic AI Merges Static and Dynamic Testing (xbow.com)
  6. The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions. (xbow.com)

back